FNGSrvRunProp[.]dll | Triage

Sharing

General

Target

FNGSrvRunProp.dll
Size

22KB
MD5

331e71ea295271d2fe053a4627341e35
SHA1

fae37c8c56e49cf36192ca4b5fc8029681667986
SHA256

771b420cb5bfd559fc30e389339eb795838d03bcaa92ddd696368a245e56a76a
SHA512

52112c8bf40f1a5cef84081d3d39032f4436e667e126fd898904bd692962e230c2f4eff96030b3d8685ebb7aeb6e8cb603e3582ca9136fa34174c4842177259a
SSDEEP

192:zjH1neMX76kZVJnlYJL/erNINyfDLEGsfJgpnsgB2iu:zbxeMeMoqhgyfDLErBgagH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FNGSrvRunProp.dll

Files

FNGSrvRunProp.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Work\Dongle\VS2012\15092014\FNGSrvRunProp\obj\Release\FNGSrvRunProp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ