Static task
static1
Behavioral task
behavioral1
Sample
FNGSysproc.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
FNGSysproc.dll
Resource
win10v2004-20240426-en
General
-
Target
FNGSysproc.dll
-
Size
522KB
-
MD5
9b72a5cf10593f7bdf60af8e17e4e3b4
-
SHA1
3ee74dc92a280850ada13f950c5cf8b41b193b13
-
SHA256
34564abf000adad7498ed5fa86e02c348a63b75e19bcf1522ce08537c59a47d9
-
SHA512
d10be7e18f8efefe89bceeda10e25ff21b324aec320231016d5ba85134bf6191629bb57a17a8e5d964abe696c6d3505e7b2ab4951baa14b016d0fe7422693ae8
-
SSDEEP
6144:JWGNWo0Jwjwr9Yvbj+cdJD+lPshbwiz0IA/a:bNdWPiF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FNGSysproc.dll
Files
-
FNGSysproc.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 510KB - Virtual size: 509KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ