C:\Users\Erik Rufelt\Desktop\fw1codeplex\Release\Win32\FW1FontWrapper.pdb
Static task
static1
1 signatures
General
-
Target
FW1FontWrapper.dll
-
Size
126KB
-
MD5
b14d79ebc4511bf95df0543e4b2b0888
-
SHA1
f557ffaed6a71c72247e368ff9570e9d71f25ed2
-
SHA256
bec564dbac306e3742ba36dc4ed95796748fe593a65e3b604844b643d40422d5
-
SHA512
029ce135a2fe96df5555d03ce720e69ace14aec0ba8b779761f88460c35eb1f402314fc227d6e3ab537b39f4a8e8bd0e33a270b79cfc9628470ac858a80b721b
-
SSDEEP
1536:nzgFqgzh5TcW/F645f/+ljTJRkiSZH63DPnz3FkW+7wxkrnfdHm17VSuyTuQg2y:nzgFdzLcW91f/+lkG3fM7Bf9m1z
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FW1FontWrapper.dll
Files
-
FW1FontWrapper.dll.dll windows:5 windows x86 arch:x86
f67976ee0f1c89bcb55235ca62a9eb68
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetLastError
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
FreeLibrary
InterlockedIncrement
Sleep
DecodePointer
EncodePointer
GetCurrentThreadId
GetCommandLineA
RaiseException
HeapFree
WriteFile
GetStdHandle
GetModuleFileNameW
HeapAlloc
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
ExitProcess
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
user32
SetRect
FillRect
gdi32
GetCurrentObject
CreateSolidBrush
DeleteObject
GetObjectW
Exports
Exports
FW1CreateFactory
_FW1CreateFactory@8
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ