fusion-plus[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
fusion-plus.dll
Size 975KB
Sample260708-wsv6cset3j
SHA256 6826430e3d0a040352bf73dbfc99ba005d16b84787bf5450bb8c90f43ed350e5
MD5 50d602ac37968d0fb08b07bdb888801c
SHA1 75c6de6335cdceaae7d63b1606906bf590119c90
SHA512 e9ca26b7dc5404a058e9342522ca047407ee32c441fb771031794e321c23aa07d0852d81770196a05805d2912ae0e688104734f83976a4230c7c16364ed50125
SSDEEP 12288:Da0JGbhzBQ0qW+/GX8bRxgGdghbeDYJby+FJhc9qV4sVf0CycWBJTMUb1+Xh0LH:DNGdzBQVx/Gi/gGGqDQvnR2c6lMNh0L
TLSH
T1A0259E5DB2E509F4D466E07CCA97A907F6353458033646FB57E0A2442F923F0BBBEA90
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fusion-plus.dll

File Explorer

fusion-plus.dll

.dll 975KB

fusion-plus.dll

IMPHASH a0e5ebcecd3206657ab8b0afbb705e6a
SHA256 6826430e3d0a040352bf73dbfc99ba005d16b84787bf5450bb8c90f43ed350e5
MD5 50d602ac37968d0fb08b07bdb888801c
SHA1 75c6de6335cdceaae7d63b1606906bf590119c90
SHA512 e9ca26b7dc5404a058e9342522ca047407ee32c441fb771031794e321c23aa07d0852d81770196a05805d2912ae0e688104734f83976a4230c7c16364ed50125
SSDEEP 12288:Da0JGbhzBQ0qW+/GX8bRxgGdghbeDYJby+FJhc9qV4sVf0CycWBJTMUb1+Xh0LH:DNGdzBQVx/Gi/gGGqDQvnR2c6lMNh0L
TLSH
T1A0259E5DB2E509F4D466E07CCA97A907F6353458033646FB57E0A2442F923F0BBBEA90
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

747892

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\Programming Projects\fusion-plus\fusion-plus\build\fusion-plus.pdb

jvm

gHotSpotVMStructs JNI_GetCreatedJavaVMs gHotSpotVMTypes

opengl32

wglMakeCurrent glPopMatrix glViewport glEnableClientState glPopAttrib glPolygonMode glBindTexture glGenTextures glVertexPointer glEnable glScissor glDisableClientState wglDeleteContext glBlendFunc glLoadIdentity glTexParameteri glDeleteTextures glTexCoordPointer glGetTexEnviv glTexImage2D glColorPointer glTexEnvi glDrawElements glDisable glPushMatrix glMatrixMode glShadeModel glPixelStorei glOrtho glPushAttrib glGetIntegerv wglGetCurrentContext wglCreateContext glClearColor

kernel32

FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetFileInformationByHandleEx ReleaseSRWLockExclusive AcquireSRWLockExclusive SleepConditionVariableSRW VirtualProtect VirtualFree VirtualAlloc MultiByteToWideChar GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock GetModuleHandleA LoadLibraryA QueryPerformanceFrequency FormatMessageA CreateDirectoryW FreeLibrary QueryPerformanceCounter GetSystemInfo VirtualQuery HeapCreate HeapFree GetCurrentProcess Thread32Next Thread32First GetCurrentThreadId SuspendThread ResumeThread CreateToolhelp32Snapshot Sleep GetLastError HeapReAlloc CloseHandle HeapAlloc HeapDestroy GetThreadContext GetCurrentProcessId FlushInstructionCache SetThreadContext OpenThread FreeConsole FreeLibraryAndExitThread DisableThreadLibraryCalls CreateThread InitOnceComplete WakeAllConditionVariable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetSystemTimeAsFileTime InitializeSListHead CreateFileW GetLocaleInfoEx InitOnceBeginInitialize GetProcAddress LocalFree

user32

GetForegroundWindow GetClipboardData EmptyClipboard CloseClipboard OpenClipboard SetCursorPos ReleaseCapture GetAsyncKeyState SendInput MapVirtualKeyA IsWindowUnicode PostMessageA MessageBoxA CallWindowProcA WindowFromDC GetClipCursor ClipCursor GetKeyState LoadCursorA ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetCursorPos SetClipboardData SendMessageA SetCapture SetCursor GetClientRect SetWindowPos GetSystemMetrics ShowWindow SetWindowLongPtrA

shell32

ShellExecuteA SHGetFolderPathA

msvcp140

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??Bid@locale@std@@QEAA_KXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z _Query_perf_frequency _Query_perf_counter ?uncaught_exceptions@std@@YAHXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xbad_function_call@std@@YAXXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z ?good@ios_base@std@@QEBA_NXZ ?_Random_device@std@@YAIXZ _Xtime_get_ticks ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Winerror_map@std@@YAHH@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

imm32

ImmSetCandidateWindow ImmReleaseContext ImmGetContext ImmSetCompositionWindow

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memmove __std_exception_copy __std_type_info_destroy_list memset _CxxThrowException __current_exception_context __current_exception __C_specific_handler __std_exception_destroy memcpy memchr strstr _purecall __std_terminate memcmp

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn _initialize_narrow_environment abort _seh_filter_dll _configure_narrow_argv _initterm_e _initterm terminate _cexit _crt_atexit _execute_onexit_table _register_onexit_function _initialize_onexit_table _errno

api-ms-win-crt-heap-l1-1-0

_callnewh realloc free malloc

api-ms-win-crt-string-l1-1-0

strcpy_s tolower strncpy_s strncmp strcmp strncpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf fputc fflush fclose __stdio_common_vsscanf _wfopen fgetc fwrite __stdio_common_vfprintf fseek __acrt_iob_func ftell __stdio_common_vsprintf_s fgetpos setvbuf ungetc fsetpos fread _get_stream_buffer_pointers _fseeki64

api-ms-win-crt-math-l1-1-0

fmaxf atan2 tanf atan2f ceilf cosf fminf acosf fmodf _dsign sinf sqrt sqrtf powf

api-ms-win-crt-convert-l1-1-0

strtoull strtoll atof strtod

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func localeconv

api-ms-win-crt-time-l1-1-0

_mktime64

api-ms-win-crt-utility-l1-1-0

qsort rand