faltuchams[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

faltuchams.dll
Size

14.9MB
MD5

a883e94ac90f34ed122726559bfd9240
SHA1

fe65bce71b854750ee19f996b9f44565b0d7b8b9
SHA256

fdac399fcb547de82bf9f638cd0b77f8b7b9c2b3fc585d0101fd6af8b7c03a64
SHA512

2b8c10fc5d86972a41142820d9c09a7765b85c21b538c9a9bda2b3fd2dd212cee8c8a89be3585ef93b6bff8c49ad3cf92cbb176d7de4c1faf63110596959605d
SSDEEP

393216:5uBJydY6y9vAEuOhXyM2CeToDeLewYwNzRfQ5:KJqv8Asovh8zqV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faltuchams.dll

Files

faltuchams.dll
.dll windows:6 windows x64 arch:x64

7d646e48c1da872c144bb997b6f8891e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

d3d11

D3D11CreateDeviceAndSwapChain

opengl32

wglGetProcAddress

kernel32

CreateEventW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetForegroundWindow

gdi32

GetDeviceCaps

advapi32

ConvertSidToStringSidA

shell32

ShellExecuteA

imm32

ImmGetContext

d3dcompiler_43

D3DCompile

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z

urlmon

URLDownloadToFileA

userenv

UnloadUserProfile

wininet

HttpSendRequestA

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memchr

api-ms-win-crt-stdio-l1-1-0

ftell

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-convert-l1-1-0

strtoull

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-math-l1-1-0

atan2f

Sections

.text
Size: - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.a9`
Size: - Virtual size: 9.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.M8C
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.\2[
Size: 14.9MB - Virtual size: 14.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d646e48c1da872c144bb997b6f8891e

Headers

DLL Characteristics

File Characteristics

Imports

d3d11

opengl32

kernel32

user32

gdi32

advapi32

shell32

imm32

d3dcompiler_43

msvcp140

urlmon

userenv

wininet

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

Sections

.text Size: - Virtual size: 580KB

.rdata Size: - Virtual size: 172KB

.data Size: - Virtual size: 40KB

.pdata Size: - Virtual size: 23KB

.a9` Size: - Virtual size: 9.2MB

.M8C Size: 4KB - Virtual size: 3KB

.\2[ Size: 14.9MB - Virtual size: 14.9MB

.reloc Size: 512B - Virtual size: 280B

.rsrc Size: 512B - Virtual size: 469B

.text
Size: - Virtual size: 580KB

.rdata
Size: - Virtual size: 172KB

.data
Size: - Virtual size: 40KB

.pdata
Size: - Virtual size: 23KB

.a9`
Size: - Virtual size: 9.2MB

.M8C
Size: 4KB - Virtual size: 3KB

.\2[
Size: 14.9MB - Virtual size: 14.9MB

.reloc
Size: 512B - Virtual size: 280B

.rsrc
Size: 512B - Virtual size: 469B