FNGSWFileClient[.]dll | Triage

Sharing

General

Target

FNGSWFileClient.dll
Size

27KB
MD5

8f848a62128c2b99f68ce3bf86b75ed5
SHA1

222cbc37ea4c3790cf1d2a5deb7ed427b9be2137
SHA256

9ed7bd2ec84753c93a4667f69226a65de4ea5f1679f568a8041a9ed86a0966c9
SHA512

c7ed96d49a1adc93cf558b6ba5872c86c8ddc13824207532a8fc9ef7cea6ead58ecf6ffe948a8d495ae3f32638c51459e009dd981907d1cf9b7f2521ce4ef296
SSDEEP

192:lKdLYuQ9Bc+NAW+zlmZ6EK7tRM37xtOdqt0y1aUI86nZVznlYJL/eNlFIftI2T1R:lKdLYuQ9ScZmLUu4BsaqNnIlLTEn1n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FNGSWFileClient.dll

Files

FNGSWFileClient.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ