Static task
static1
Behavioral task
behavioral1
Sample
FNGSWConfig.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
FNGSWConfig.dll
Resource
win10v2004-20240508-en
General
-
Target
FNGSWConfig.dll
-
Size
19KB
-
MD5
7fb64216d1a092b2138db1ad1a9bccfe
-
SHA1
cd65a237470dfbeff847561c1b1f367c4d9f1422
-
SHA256
73cf408386d044985dad5e2bc2e531a27af7924c76d3f3a92fdd78edf45f9c50
-
SHA512
9c93e83127d717233882372db8819bf2e542e94463b97cb21474bf4b247bfcb6069d701e18ba2e5c148e7aeefee064ea25730025f94c3adda2274e83e94c93fa
-
SSDEEP
192:sLEBYdexD1wXKUDZVOnlYJL/erNIXLTGKX1tjNG9qcll:sLEBYs1+Ft1qhwLTb1zGc8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FNGSWConfig.dll
Files
-
FNGSWConfig.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ