erbium | fagality[.]dll

General

Target
fagality.dll
Size 36.2MB
Sample241024-1ef7havcmk
SHA256 74a00336a08201483ce04dc30891b077b614cd5023336efac17a5aaa9ddd8b8e
MD5 36a3ff324f2fe1a9e71f40bf575c936c
SHA1 f1ef1d289021000c2f742e7b38518bb0fdbde905
SHA512 d4a3753e3261239a45ff54091274c4eafda834387eb7221bd0aa6b6a2d8170f9ba68d07c623903a562ef5f07aff51bfbc214bc93771396027ebba2c1a0e06b2d
SSDEEP 393216:w/SBskEyrtN+zJkGsF20dH5ZXtpKjzw1QxgvLqmNAmjpy:UArtN+zJkGsF2OZZXuv4GcLjp
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

erbium

Malware Config

Signatures

Erbium family
erbium

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fagality.dll

File Explorer

fagality.dll

.dll 36.2MB

fagality.dll

IMPHASH 6f914c83ee8732aa4353c085e5e29778
SHA256 74a00336a08201483ce04dc30891b077b614cd5023336efac17a5aaa9ddd8b8e
MD5 36a3ff324f2fe1a9e71f40bf575c936c
SHA1 f1ef1d289021000c2f742e7b38518bb0fdbde905
SHA512 d4a3753e3261239a45ff54091274c4eafda834387eb7221bd0aa6b6a2d8170f9ba68d07c623903a562ef5f07aff51bfbc214bc93771396027ebba2c1a0e06b2d
SSDEEP 393216:w/SBskEyrtN+zJkGsF20dH5ZXtpKjzw1QxgvLqmNAmjpy:UArtN+zJkGsF2OZZXuv4GcLjp
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4266218

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\___\old\fatality recrack fix\Release\fagality.pdb

kernel32

SizeofResource VirtualProtect VirtualAlloc FindResourceA GetModuleHandleA AttachConsole LoadLibraryA LockResource CreateThread LoadResource GetProcAddress GetCurrentProcessId AllocConsole VirtualQuery VirtualFree HeapCreate HeapFree GetCurrentProcess Thread32Next Thread32First GetCurrentThreadId SuspendThread ResumeThread CreateToolhelp32Snapshot Sleep HeapReAlloc CloseHandle HeapAlloc GetThreadContext GetModuleHandleW FlushInstructionCache SetThreadContext OpenThread WriteConsoleW SetEndOfFile ReadConsoleW ReadFile HeapSize CreateFileW SetFilePointerEx WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar GetStringTypeW GetCPInfo SetLastError FreeLibrary IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException InterlockedFlushSList GetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW LCMapStringW GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode SetStdHandle GetFileSizeEx

shell32

ShellExecuteA

ws2_32

recv connect send

Resubmissions

Sharing