FINAF009[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FINAF009.dll
Size

805KB
MD5

acadfb292e78b65b77280e52a2fa9b41
SHA1

a4eba25c8b4e2fb3e21bcbde410f372db04c3ea6
SHA256

d6d33479fd0e4029df67ceb53cd4491c544888e7f0dab03c8b2df7d57938b671
SHA512

7ec0acf3dc1e56cf9fd57bbaad45f250dd1deb1ee9573d5931a17650f1578d9fa352a7f5df8a79c75c489bed8d502c9c04f1f4c9276e5454586789f9f305e9fd
SSDEEP

12288:lYvwZjeMIZ2bnv17l1jqGl0xbcjD40U1hflyM:lgIeMrjqGt40U1hflyM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FINAF009.dll

Files

FINAF009.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CARREGA_TELA

Sections

CODE
Size: 444KB - Virtual size: 443KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 509B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ