FLEngine_x64_Copy1[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

FLEngine_x64_Copy1.dll
Size

60.9MB
MD5

8cf300dcb6e41ee31ed6a2b58d9e26d7
SHA1

7a5dc2917942d59dedc11bc861aafd58985debb7
SHA256

abfa585a5358e658bd92d159e9f846b2950c7e300c47392283443a1bcb70fd52
SHA512

ffff2eb3f0c654f7d761978202af5d8aa64806fc6d50bc75be619ebf5e078e4fb7263aba0959d9cb941f3f515c2ed3c0cd4d5f9bab5758b82825368a975b25c7
SSDEEP

1572864:kRaFRXuG/pEqk4Ldvts4T6wH1Wq5qgZhgUB:qIXbRtLsYL8Wg+

Score

1^/10

Malware Config

Signatures

Files

FLEngine_x64_Copy1.dll
.dll windows:6 windows x64 arch:x64

5479e7b66f8c498d2483d58733f6aeaf

Code Sign

65:55:f8:0e:2f:b5:ca:6b:ba:97:f9:9d:c5:d9:31:f4
Certificate

Issuer

CN=Image Line

Not Before

03-03-2023 13:36

Not After

31-12-2039 23:59

Subject

CN=Image Line

Extended Key Usages

ExtKeyUsageCodeSigning

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a9:f3:78:30:b3:e7:4b:e0:3b:62:9b:9b:a7:01:36:d2:96:15:6b:04:87:7d:d0:b6:e9:9d:5e:27:67:2e:5a:bb
Signer

Actual PE Digest

a9:f3:78:30:b3:e7:4b:e0:3b:62:9b:9b:a7:01:36:d2:96:15:6b:04:87:7d:d0:b6:e9:9d:5e:27:67:2e:5a:bb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

shlwapi

PathUnExpandEnvStringsW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

user32

CopyImage
SetMenuItemInfoW
GetMenuItemInfoW
DefFrameProcW
SetCaretPos
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
CreatePopupMenu
ShowCaret
GetMenuItemID
DestroyCaret
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
SetForegroundWindow
GetWindowTextW
GetAsyncKeyState
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
AttachThreadInput
GetSubMenu
EqualRect
DestroyIcon
IsWindowVisible
PtInRect
GetGuiResources
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetMessageTime
NotifyWinEvent
GetWindowLongPtrW
SetWindowLongPtrW
CreateMenu
LoadStringW
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
ScrollDC
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetClassNameW
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetMessageW
GetDCEx
PeekMessageW
MonitorFromWindow
GetUpdateRect
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
OffsetRect
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
InflateRect
DrawFocusRect
ReleaseCapture
SendInput
LoadCursorW
ScrollWindow
GetLastActivePopup
UnionRect
GetCursorInfo
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
ClientToScreen
SetClipboardData
GetClipboardData
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
ToAscii
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
CreateCaret
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
GetDoubleClickTime
EmptyClipboard
GetAncestor
GetDlgItem
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
SetKeyboardState
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
SubtractRect
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CallWindowProcW
CountClipboardFormats
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
ToUnicode
InsertMenuW
PostThreadMessageW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

oleaut32

SafeArrayPutElement
GetErrorInfo
VariantInit
VariantClear
SysFreeString
SafeArrayAccessData
SysReAllocStringLen
SafeArrayCreate
SafeArrayGetElement
GetActiveObject
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex
SafeArrayGetElemsize
VariantCopy
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopyInd
VariantChangeType

advapi32

RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
OpenProcessToken
RegOpenKeyExW
RegQueryInfoKeyW
RegOpenKeyExA
RegDeleteValueW
RegFlushKey
RegQueryValueExW
RegEnumValueW
GetTokenInformation
RegCloseKey
RegCreateKeyExW

msvcrt

memcpy
memset

kernel32

SetFileAttributesW
GetFileType
SetFileTime
RtlUnwindEx
QueryDosDeviceW
DeleteAtom
GetACP
GetExitCodeProcess
IsBadWritePtr
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
SetEnvironmentVariableW
OpenFileMappingW
QueryPerformanceFrequency
IsDebuggerPresent
FindNextFileW
GetFullPathNameW
VirtualFree
HeapAlloc
ExitProcess
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
FindAtomW
RtlUnwind
GetCPInfo
GetStdHandle
GetTimeZoneInformation
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
GetModuleHandleW
FreeLibrary
HeapDestroy
SetDllDirectoryW
CompareFileTime
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
CreateProcessW
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
CopyFileW
AddVectoredExceptionHandler
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetComputerNameExW
GetDriveTypeW
GetVersion
SetThreadExecutionState
MoveFileW
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
GetFileAttributesExW
ExpandEnvironmentStringsW
LockResource
LoadLibraryExW
TerminateProcess
SetPriorityClass
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
WritePrivateProfileStringW
AddAtomW
WaitForMultipleObjects
GetTempFileNameW
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
DuplicateHandle
LeaveCriticalSection
GetProcAddress
ResumeThread
GetLogicalDriveStringsW
GetVersionExW
VerifyVersionInfoW
HeapCreate
GetWindowsDirectoryW
SignalObjectAndWait
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
SystemTimeToFileTime
GetSystemDirectoryW
DeleteFileW
IsDBCSLeadByteEx
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
AssignProcessToJobObject
GetComputerNameW
TzSpecificLocalTimeToSystemTime
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
GlobalMemoryStatus
CreateEventW
GetPrivateProfileStringW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale
GetSystemTimeAsFileTime
CreateEventA
GetModuleHandleA
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
LoadLibraryA
FreeLibrary
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFree
HeapAlloc
HeapFree
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetModuleHandleW
LoadResource
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
FlsSetValue
GetCommandLineA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
RtlPcToFileHeader
RtlUnwindEx
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapReAlloc
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA

wintrust

WinVerifyTrust

shfolder

SHGetFolderPathW

crypt32

CertGetNameStringW
CryptQueryObject
CertFindCertificateInStore
CertFreeCertificateContext
CertCloseStore
CryptMsgGetParam
CryptMsgClose

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
CreatePolygonRgn
BeginPath
GetEnhMetaFileHeader
CloseEnhMetaFile
RectVisible
AngleArc
ResizePalette
SetAbortProc
SetTextColor
GetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
CreateDCW
CreateICW
CreatePen
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
StartPage
GetBitmapBits
StartDocW
GetSystemPaletteEntries
GetEnhMetaFileBits
CreatePenIndirect
GetRegionData
GetEnhMetaFilePaletteEntries
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
EndDoc
GetObjectW
GetCurrentObject
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
CreateEnhMetaFileW
Arc
CreateRectRgnIndirect
TextOutW
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
CreatePatternBrush
EndPath
EndPage
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SelectClipPath
SetEnhMetaFileBits
Rectangle
DeleteDC
SaveDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
Polyline
IntersectClipRect
CreateBitmap
CombineRgn
SetWinMetaFileBits
CreateDIBitmap
GetStretchBltMode
CreateDIBSection
SetStretchBltMode
GetDIBits
LineTo
GetRgnBox
EnumFontsW
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
GetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
SetTextAlign
GetTextAlign
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
midiInClose
midiInPrepareHeader
timeGetTime
midiOutOpen
midiInStop
midiInOpen
midiOutShortMsg
timeBeginPeriod
midiOutClose
midiOutGetNumDevs
midiOutGetErrorTextW
midiInAddBuffer
midiOutGetDevCapsW
midiInGetDevCapsW
midiOutPrepareHeader
midiInUnprepareHeader
timeGetDevCaps
midiInGetNumDevs
midiOutLongMsg
midiInReset
midiInGetErrorTextW
midiOutUnprepareHeader
midiInStart

oleacc

LresultFromObject

wininet

InternetCloseHandle
HttpAddRequestHeadersW
InternetGetLastResponseInfoW
InternetConnectW
InternetSetOptionW
InternetWriteFile
HttpEndRequestW
InternetGetConnectedState
HttpSendRequestExW
InternetReadFile
HttpOpenRequestW
InternetOpenUrlW
InternetOpenW
HttpQueryInfoW
HttpQueryInfoA

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW
GetDefaultPrinterW
EnumPrintersW

comdlg32

GetSaveFileNameW
GetOpenFileNameW

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
SHGetSpecialFolderLocation
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
ShellExecuteExW
PathCleanupSpec
DragFinish
SHChangeNotifyDeregister
SHGetMalloc
ILCreateFromPathW
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetDesktopFolder
SHChangeNotifyRegister
ILFree
SHFileOperationW
SHAppBarMessage
SHAddToRecentDocs
ShellExecuteA
ShellExecuteW

imagehlp

ImageRvaToVa
ImageDirectoryEntryToData
ImageNtHeader

ole32

CreateDataAdviseHolder
StgCreateDocfileOnILockBytes
CoCreateInstance
OleGetClipboard
CLSIDFromString
OleSetClipboard
IsEqualGUID
OleFlushClipboard
CreateStreamOnHGlobal
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
CoGetClassObject
CoInitialize
OleDraw
CoTaskMemAlloc
DoDragDrop
StringFromCLSID
CoMarshalInterThreadInterfaceInStream
RevokeDragDrop
IsAccelerator
CoGetInterfaceAndReleaseStream
CoUninitialize
ReleaseStgMedium
RegisterDragDrop
OleInitialize
ProgIDFromCLSID
OleUninitialize
CoTaskMemFree
OleSetMenuDescriptor

msacm32

acmStreamSize
acmStreamClose
acmFormatChooseW
acmDriverClose
acmStreamUnprepareHeader
acmDriverOpen
acmStreamMessage
acmDriverDetailsA
acmStreamOpen
acmFormatSuggest
acmStreamConvert
acmDriverEnum
acmStreamPrepareHeader
acmMetrics

dsound

DirectSoundEnumerateA
DirectSoundCreate

Exports

Exports

CreateFruityInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 14.0MB - Virtual size: 14.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1.2MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xda0
Size: 475KB - Virtual size: 475KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 586KB - Virtual size: 586KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xda1
Size: 36.7MB - Virtual size: 36.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xda1
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xda0
Size: 476KB - Virtual size: 475KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WD
Size: 512B - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xda2
Size: 768KB - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xda3
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xda4
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 487KB - Virtual size: 486KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5479e7b66f8c498d2483d58733f6aeaf

Code Sign

65:55:f8:0e:2f:b5:ca:6b:ba:97:f9:9d:c5:d9:31:f4Certificate

Extended Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

a9:f3:78:30:b3:e7:4b:e0:3b:62:9b:9b:a7:01:36:d2:96:15:6b:04:87:7d:d0:b6:e9:9d:5e:27:67:2e:5a:bbSigner

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

version

user32

oleaut32

advapi32

msvcrt

kernel32

wintrust

shfolder

crypt32

gdi32

mpr

winmm

oleacc

wininet

winspool.drv

comdlg32

comctl32

shell32

imagehlp

ole32

msacm32

dsound

Exports

Exports

Sections

.text Size: 14.0MB - Virtual size: 14.0MB

.data Size: 1.9MB - Virtual size: 1.9MB

.bss Size: - Virtual size: 1.2MB

.idata Size: 25KB - Virtual size: 25KB

.didata Size: 5KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 189B

.rdata Size: 512B - Virtual size: 69B

.xda0 Size: 475KB - Virtual size: 475KB

.pdata Size: 586KB - Virtual size: 586KB

.xda1 Size: 36.7MB - Virtual size: 36.7MB

.xda1 Size: 1.9MB - Virtual size: 1.9MB

.xda0 Size: 476KB - Virtual size: 475KB

.WD Size: 512B - Virtual size: 16B

.xda2 Size: 768KB - Virtual size: 768KB

.xda3 Size: 8KB - Virtual size: 7KB

.xda4 Size: 1.7MB - Virtual size: 1.7MB

.reloc Size: 487KB - Virtual size: 486KB

.rsrc Size: 1.9MB - Virtual size: 1.9MB

65:55:f8:0e:2f:b5:ca:6b:ba:97:f9:9d:c5:d9:31:f4
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

a9:f3:78:30:b3:e7:4b:e0:3b:62:9b:9b:a7:01:36:d2:96:15:6b:04:87:7d:d0:b6:e9:9d:5e:27:67:2e:5a:bb
Signer

.text
Size: 14.0MB - Virtual size: 14.0MB

.data
Size: 1.9MB - Virtual size: 1.9MB

.bss
Size: - Virtual size: 1.2MB

.idata
Size: 25KB - Virtual size: 25KB

.didata
Size: 5KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 189B

.rdata
Size: 512B - Virtual size: 69B

.xda0
Size: 475KB - Virtual size: 475KB

.pdata
Size: 586KB - Virtual size: 586KB

.xda1
Size: 36.7MB - Virtual size: 36.7MB

.xda1
Size: 1.9MB - Virtual size: 1.9MB

.xda0
Size: 476KB - Virtual size: 475KB

.WD
Size: 512B - Virtual size: 16B

.xda2
Size: 768KB - Virtual size: 768KB

.xda3
Size: 8KB - Virtual size: 7KB

.xda4
Size: 1.7MB - Virtual size: 1.7MB

.reloc
Size: 487KB - Virtual size: 486KB

.rsrc
Size: 1.9MB - Virtual size: 1.9MB