erbium | femordial[.]dll

General

Target
femordial.dll
Size 36.1MB
Sample240607-xk2tlsdb53
SHA256 ed6566cd8828d0d9a7bd2bd7731df7703977d9b18fa7ede31bb8b1835b12da78
MD5 38bf550f8d73ea9791d7778d9b6b44a8
SHA1 67bf70a4d78f9f18b1af30cd9c85c632b52188c1
SHA512 cfff6d55b90a42be22d09aaf30eed718b71fff8bfddab2404e968359a18ab8aec679a4ca85e144d3527602fd515a03724e897addd68865e796b0a387f582fd7f
SSDEEP 393216:g4S82OrtN+zJkGsF20dH5ZXtpKjzw1QxgvLqmNAmjpy:7OOrtN+zJkGsF2OZZXuv4GcLjp
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

erbium

Malware Config

Signatures

Erbium family
erbium

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
femordial.dll

File Explorer

femordial.dll

.dll 36.1MB

femordial.dll

IMPHASH a1e09d5ba7dd62b3319c960d9e083821
SHA256 ed6566cd8828d0d9a7bd2bd7731df7703977d9b18fa7ede31bb8b1835b12da78
MD5 38bf550f8d73ea9791d7778d9b6b44a8
SHA1 67bf70a4d78f9f18b1af30cd9c85c632b52188c1
SHA512 cfff6d55b90a42be22d09aaf30eed718b71fff8bfddab2404e968359a18ab8aec679a4ca85e144d3527602fd515a03724e897addd68865e796b0a387f582fd7f
SSDEEP 393216:g4S82OrtN+zJkGsF20dH5ZXtpKjzw1QxgvLqmNAmjpy:7OOrtN+zJkGsF2OZZXuv4GcLjp
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4205182

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\useless&&\proj new\fatality recrack fix\Release\fagality.pdb

kernel32

SizeofResource VirtualProtect VirtualAlloc FindResourceA GetModuleHandleA AttachConsole LoadLibraryA LockResource CreateThread LoadResource GetProcAddress GetCurrentProcessId GetConsoleWindow AllocConsole VirtualQuery VirtualFree HeapCreate HeapFree GetCurrentProcess Thread32Next Thread32First GetCurrentThreadId SuspendThread ResumeThread CreateToolhelp32Snapshot Sleep HeapReAlloc CloseHandle HeapAlloc GetThreadContext GetModuleHandleW FlushInstructionCache SetThreadContext OpenThread WriteConsoleW SetEndOfFile ReadConsoleW ReadFile HeapSize CreateFileW SetFilePointerEx GetFileSizeEx SetStdHandle GetConsoleMode GetConsoleOutputCP WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar GetStringTypeW GetCPInfo SetLastError FreeLibrary InitializeCriticalSectionAndSpinCount SetEvent ResetEvent WaitForSingleObjectEx CreateEventW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException InterlockedFlushSList GetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW LCMapStringW GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap FlushFileBuffers WriteFile

user32

SetWindowLongA SetWindowPos GetWindowLongA

shell32

ShellExecuteA

ws2_32

connect send recv

Resubmissions

Sharing