FLEngine_x64[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
FLEngine_x64.dll
Size 25.7MB
Sample260710-msvp6aaz2w
SHA256 85cc415bb094e8af2bb0bf27fb7d2021cdb9424c516be1f11282b57ee1ee5fdf
MD5 60a4e5191250b2f4dbaf33c1bc11ca7b
SHA1 295f97e514304345e431023a8d72063309aab1c2
SHA512 c463282e8b6f46d66dd37df1bdc66989a5c46226cc025f7c9b42729741fe8587d8dfcec7783aff7da14255c19b8dc116e831f4f0b8d6472fadc6df4adc7cf1ca
SSDEEP 196608:3SOxFpvMgzAG3hVw1AQK5SQQMMkw10dm5LENsyzkD1P:1dvMgEkE1A55SQQMC0w5LENsBpP
TLSH
T1E1476B6F31E49118C06BC239C2674F55EB33B0A80B31D7FB529016582F66AD8AE7E771
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
FLEngine_x64.dll

File Explorer

FLEngine_x64.dll

.dll 25.7MB

FLEngine_x64.dll

IMPHASH 6647993d083eb5665827627c32a5db9b
SHA256 85cc415bb094e8af2bb0bf27fb7d2021cdb9424c516be1f11282b57ee1ee5fdf
MD5 60a4e5191250b2f4dbaf33c1bc11ca7b
SHA1 295f97e514304345e431023a8d72063309aab1c2
SHA512 c463282e8b6f46d66dd37df1bdc66989a5c46226cc025f7c9b42729741fe8587d8dfcec7783aff7da14255c19b8dc116e831f4f0b8d6472fadc6df4adc7cf1ca
SSDEEP 196608:3SOxFpvMgzAG3hVw1AQK5SQQMMkw10dm5LENsyzkD1P:1dvMgEkE1A55SQQMC0w5LENsBpP
TLSH
T1E1476B6F31E49118C06BC239C2674F55EB33B0A80B31D7FB529016582F66AD8AE7E771
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

94:14:69:56:12:d5:f7:38:d9:e0:6e:81:c6:14:9f:0c:99:30:3c:e0:a9:c2:0f:00:95:6e:b1:3e:80:1d:ba:78:1b:22:c6:0e:7c:fd:fb:a0:78:36:87:d1:26:bf:80:5c:3e:f5:58:4c:f9:81:34:a4:1e:e6:4a:2c:bf:ee:bb:1d

Digest Algorithm

sha512

PE Digests Matches

Trusted

Not trusted

Signing Certificate

NO CERTIFICATE

Chains

Jan 1, 0001

Minor OS version

Major OS version

Entry point

26289430

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

shlwapi

PathUnExpandEnvStringsW

opengl32

wglUseFontBitmapsW wglGetProcAddress

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

user32

CopyImage SetMenuItemInfoW GetMenuItemInfoW DefFrameProcW SetCaretPos CharToOemBuffW ScrollWindowEx GetUpdateRgn FrameRect RegisterWindowMessageW GetMenuStringW FillRect SendMessageA IsClipboardFormatAvailable EnumWindows ShowOwnedPopups GetClassInfoW GetScrollRange SetActiveWindow GetActiveWindow DrawEdge GetKeyboardLayoutList LoadBitmapW EnumChildWindows UnhookWindowsHookEx SetCapture GetCapture CreatePopupMenu ShowCaret GetMenuItemID DestroyCaret CharLowerBuffW PostMessageW IsZoomed SetParent DrawMenuBar InvalidateRgn GetClientRect IsChild ShowCursor IntersectRect IsIconic CallNextHookEx ShowWindow SetForegroundWindow GetWindowTextW GetAsyncKeyState IsDialogMessageW DestroyWindow RegisterClassW CharNextW GetFocus GetDC SetFocus ReleaseDC CreateIconFromResource SetScrollRange DrawTextW MessageBeep LockWindowUpdate RemovePropW AttachThreadInput GetSubMenu EqualRect DestroyIcon IsWindowVisible PtInRect GetGuiResources DispatchMessageA UnregisterClassW GetTopWindow SendMessageW GetMessageTime NotifyWinEvent GetWindowLongPtrW SetWindowLongPtrW CreateMenu LoadStringW CharLowerW SetWindowRgn SetWindowPos GetMenuItemCount ValidateRgn GetWindowDC DrawTextExW CharNextExA EnumClipboardFormats ScrollDC GetScrollInfo SetWindowTextW GetMessageExtraInfo GetSysColor EnableScrollBar TrackPopupMenu DrawIconEx GetClassNameW GetMessagePos GetIconInfo SetScrollInfo GetKeyNameTextW GetDesktopWindow SetCursorPos GetCursorPos SetMenu GetMenuState GetMenu SetRect GetKeyState ValidateRect GetCursor KillTimer BeginDeferWindowPos WaitMessage TranslateMDISysAccel GetWindowPlacement GetClipboardFormatNameW CreateIconIndirect CreateWindowExW GetMessageW GetDCEx PeekMessageW MonitorFromWindow GetUpdateRect MessageBoxA SetTimer WindowFromPoint BeginPaint RegisterClipboardFormatW MapVirtualKeyW OffsetRect IsWindowUnicode DispatchMessageW DefMDIChildProcW GetSystemMenu SetScrollPos GetScrollPos InflateRect DrawFocusRect ReleaseCapture SendInput LoadCursorW ScrollWindow GetLastActivePopup UnionRect GetCursorInfo GetSystemMetrics SetWindowTextA CharUpperBuffW SetClassLongPtrW GetClassLongPtrW ClientToScreen SetClipboardData GetClipboardData SetWindowPlacement GetMonitorInfoW CheckMenuItem CharUpperW DefWindowProcW GetForegroundWindow ToAscii EnableWindow GetWindowThreadProcessId RedrawWindow EndPaint MsgWaitForMultipleObjectsEx LoadKeyboardLayoutW GetClipCursor EnumDisplaySettingsW ActivateKeyboardLayout GetParent CreateCaret MonitorFromRect InsertMenuItemW GetPropW MessageBoxW SetPropW UpdateWindow MsgWaitForMultipleObjects DestroyMenu SetWindowsHookExW GetDoubleClickTime EmptyClipboard GetAncestor GetDlgItem AdjustWindowRectEx IsWindow DrawIcon EnumThreadWindows InvalidateRect SetKeyboardState GetKeyboardState ScreenToClient DrawFrameControl SetCursor CreateIcon RemoveMenu SubtractRect GetKeyboardLayoutNameW OpenClipboard TranslateMessage MapWindowPoints EnumDisplayMonitors CallWindowProcW CountClipboardFormats CloseClipboard DestroyCursor PostQuitMessage ShowScrollBar LoadImageW EnableMenuItem DeferWindowPos HideCaret EndDeferWindowPos FindWindowExW MonitorFromPoint LoadIconW SystemParametersInfoW GetWindow GetWindowRect ToUnicode InsertMenuW PostThreadMessageW IsWindowEnabled IsDialogMessageA FindWindowW DeleteMenu GetKeyboardLayout

oleaut32

SafeArrayPutElement GetErrorInfo VariantInit VariantClear SysFreeString SafeArrayAccessData SysReAllocStringLen SafeArrayCreate SafeArrayGetElement GetActiveObject SysAllocStringLen SafeArrayUnaccessData SafeArrayPtrOfIndex SafeArrayGetElemsize VariantCopy SafeArrayGetUBound SafeArrayGetLBound VariantCopyInd VariantChangeType

advapi32

RegSetValueExW RegEnumKeyExW RegDeleteKeyW OpenProcessToken RegOpenKeyExW RegQueryInfoKeyW RegOpenKeyExA RegDeleteValueW RegFlushKey RegQueryValueExW RegEnumValueW GetTokenInformation RegCloseKey RegCreateKeyExW

kernel32

SetFileAttributesW GetFileType SetFileTime PowerSetRequest QueryDosDeviceW RtlUnwindEx DeleteAtom GetACP PowerClearRequest GetExitCodeProcess IsBadWritePtr CloseHandle LocalFree GetCurrentProcessId SizeofResource VirtualProtect TlsAlloc SetEnvironmentVariableW OpenFileMappingW QueryPerformanceFrequency IsDebuggerPresent FindNextFileW GetFullPathNameW VirtualFree GetProcessHeap ExitProcess HeapAlloc CreateTimerQueueTimer GetCPInfoExW GlobalSize FindAtomW RtlUnwind GetCPInfo EnumSystemLocalesW GetStdHandle GetTimeZoneInformation FileTimeToLocalFileTime SystemTimeToTzSpecificLocalTime GetModuleHandleW PowerCreateRequest FreeLibrary HeapDestroy SetDllDirectoryW CompareFileTime FileTimeToDosDateTime ReadFile DosDateTimeToFileTime GetUserDefaultLCID CreateProcessW ChangeTimerQueueTimer GetLastError GetModuleFileNameW SetLastError GlobalAlloc GlobalUnlock FindResourceW CreateThread CompareStringW CopyFileW AddVectoredExceptionHandler MapViewOfFile LoadLibraryA GetVolumeInformationW ResetEvent MulDiv FreeResource GetComputerNameExW GetDriveTypeW GetVersion SetThreadExecutionState MoveFileW RaiseException GlobalAddAtomW FormatMessageW SwitchToThread GetExitCodeThread OutputDebugStringW GetCurrentThread GetLogicalDrives LocalFileTimeToFileTime GetFileAttributesExW ExpandEnvironmentStringsW LockResource LoadLibraryExW TerminateProcess SetPriorityClass FileTimeToSystemTime GetCurrentThreadId UnhandledExceptionFilter GlobalFindAtomW VirtualQuery GlobalFree VirtualQueryEx Sleep SetVolumeLabelW EnterCriticalSection SetFilePointer LoadResource SuspendThread GetTickCount WritePrivateProfileStringW AddAtomW WaitForMultipleObjects GetTempFileNameW GetFileSize GlobalDeleteAtom GetStartupInfoW GetFileAttributesW SetCurrentDirectoryW GetCurrentDirectoryW InitializeCriticalSection GetThreadPriority GetCurrentProcess GlobalLock SetThreadPriority VirtualAlloc GetTempPathW GetCommandLineW GetSystemInfo DuplicateHandle LeaveCriticalSection GetProcAddress ResumeThread GetLogicalDriveStringsW GetVersionExW VerifyVersionInfoW HeapCreate GetWindowsDirectoryW GetProcessAffinityMask SignalObjectAndWait LCMapStringW GetDiskFreeSpaceW VerSetConditionMask FindFirstFileW GetUserDefaultUILanguage TlsFree GetConsoleOutputCP SetProcessAffinityMask UnmapViewOfFile GetConsoleCP lstrlenW CompareStringA QueryPerformanceCounter SetEndOfFile SetThreadErrorMode HeapFree WideCharToMultiByte MultiByteToWideChar FindClose LoadLibraryW DeleteTimerQueueTimer SetEvent GetLocaleInfoW CreateFileW SystemTimeToFileTime GetSystemDirectoryW DeleteFileW IsDBCSLeadByteEx GetEnvironmentVariableW GetLocalTime WaitForSingleObject GetFileInformationByHandle GetOEMCP WriteFile CreateFileMappingW ExitThread DeleteCriticalSection GetDateFormatW TlsGetValue SetErrorMode AssignProcessToJobObject GetComputerNameW TzSpecificLocalTimeToSystemTime IsValidLocale TlsSetValue CreateDirectoryW GetSystemDefaultUILanguage EnumCalendarInfoW LocalAlloc RemoveDirectoryW GlobalMemoryStatus CreateEventW GetPrivateProfileStringW WaitForMultipleObjectsEx GetThreadLocale SetThreadLocale

wintrust

WinVerifyTrust

shfolder

SHGetFolderPathW

crypt32

CertGetNameStringW CryptQueryObject CertFindCertificateInStore CertFreeCertificateContext CertCloseStore CryptMsgGetParam CryptMsgClose

gdi32

Pie SetBkMode GetRandomRgn CreateCompatibleBitmap CreatePolygonRgn BeginPath GetEnhMetaFileHeader CloseEnhMetaFile RectVisible AngleArc ResizePalette SetAbortProc SetTextColor GetTextColor StretchBlt ExtSelectClipRgn RoundRect SelectClipRgn RectInRegion RestoreDC SetRectRgn GetTextMetricsW GetWindowOrgEx SetPixelV CreatePalette CreateDCW CreateICW CreatePen PolyBezierTo GetStockObject CreateSolidBrush Polygon MoveToEx PlayEnhMetaFile Ellipse StartPage GetBitmapBits StartDocW GetSystemPaletteEntries GetEnhMetaFileBits CreatePenIndirect GetRegionData GetEnhMetaFilePaletteEntries SetMapMode CreateFontIndirectW PolyBezier LPtoDP EndDoc GetObjectW GetCurrentObject GetWinMetaFileBits SetROP2 GetEnhMetaFileDescriptionW ArcTo CreateEnhMetaFileW Arc CreateRectRgnIndirect TextOutW SelectPalette ExcludeClipRect MaskBlt SetWindowOrgEx CreatePatternBrush EndPath EndPage EqualRgn DeleteEnhMetaFile Chord SetDIBits SetViewportOrgEx CreateRectRgn SetDIBitsToDevice RealizePalette CreateFontW SetDIBColorTable GetDIBColorTable CreateBrushIndirect PatBlt SelectClipPath SetEnhMetaFileBits Rectangle DeleteDC SaveDC BitBlt FrameRgn GetDeviceCaps GetTextExtentPoint32W GetClipBox GetClipRgn Polyline IntersectClipRect CreateBitmap CombineRgn SetWinMetaFileBits CreateDIBitmap GetStretchBltMode CreateDIBSection SetStretchBltMode GetDIBits LineTo GetRgnBox EnumFontsW CreateHalftonePalette SelectObject DeleteObject ExtFloodFill UnrealizeObject CopyEnhMetaFileW OffsetRgn SetBkColor GetBkColor CreateCompatibleDC GetDCOrgEx GetBrushOrgEx GetCurrentPositionEx GetNearestPaletteIndex SetTextAlign GetTextAlign GetTextExtentPointW ExtTextOutW SetBrushOrgEx GetPixel GdiFlush SetPixel EnumFontFamiliesExW StretchDIBits GetPaletteEntries

mpr

WNetEnumResourceW WNetGetUniversalNameW WNetCloseEnum WNetOpenEnumW

winmm

timeEndPeriod midiInClose midiInPrepareHeader timeGetTime midiOutOpen midiInStop midiInOpen midiOutShortMsg timeBeginPeriod midiOutClose midiOutGetNumDevs midiOutGetErrorTextW midiInAddBuffer midiOutGetDevCapsW midiInGetDevCapsW midiOutPrepareHeader midiInUnprepareHeader timeGetDevCaps midiInGetNumDevs midiOutLongMsg midiInReset midiInGetErrorTextW midiOutUnprepareHeader midiInStart

oleacc

LresultFromObject

wininet

InternetCloseHandle HttpAddRequestHeadersW InternetGetLastResponseInfoW InternetConnectW InternetSetOptionW InternetWriteFile HttpEndRequestW InternetGetConnectedState HttpSendRequestExW InternetReadFile HttpOpenRequestW InternetOpenUrlW InternetOpenW HttpQueryInfoW HttpQueryInfoA

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW GetDefaultPrinterW EnumPrintersW

comdlg32

GetSaveFileNameW GetOpenFileNameW

comctl32

FlatSB_SetScrollInfo ImageList_DragMove ImageList_Destroy _TrackMouseEvent ImageList_DragShowNolock ImageList_Add ImageList_GetDragImage FlatSB_SetScrollProp ImageList_Create ImageList_EndDrag ImageList_DrawEx ImageList_SetImageCount FlatSB_GetScrollPos FlatSB_SetScrollPos InitializeFlatSB FlatSB_GetScrollInfo ImageList_Write ImageList_SetBkColor ImageList_GetBkColor ImageList_BeginDrag ImageList_GetIcon ImageList_Replace ImageList_GetImageCount ImageList_DragEnter ImageList_GetIconSize ImageList_SetIconSize ImageList_Read ImageList_DragLeave ImageList_Draw ImageList_Remove

shell32

DragQueryFileW SHGetSpecialFolderLocation Shell_NotifyIconW DragAcceptFiles SHGetPathFromIDListW ShellExecuteExW PathCleanupSpec DragFinish SHChangeNotifyDeregister SHGetMalloc ILCreateFromPathW SHGetFileInfoW DragQueryPoint SHGetFolderPathW SHGetDesktopFolder SHChangeNotifyRegister ILFree SHFileOperationW SHAppBarMessage SHAddToRecentDocs ShellExecuteA ShellExecuteW

imagehlp

ImageRvaToVa ImageDirectoryEntryToData ImageNtHeader

ole32

CreateDataAdviseHolder StgCreateDocfileOnILockBytes CoCreateInstance OleGetClipboard CLSIDFromString OleSetClipboard IsEqualGUID OleFlushClipboard CreateStreamOnHGlobal OleIsCurrentClipboard CreateILockBytesOnHGlobal CoGetClassObject CoInitialize OleDraw CoTaskMemAlloc DoDragDrop StringFromCLSID CoMarshalInterThreadInterfaceInStream RevokeDragDrop IsAccelerator CoGetInterfaceAndReleaseStream CoUninitialize ReleaseStgMedium RegisterDragDrop OleInitialize ProgIDFromCLSID OleUninitialize CoTaskMemFree OleSetMenuDescriptor

msacm32

acmStreamSize acmStreamClose acmFormatChooseW acmDriverClose acmStreamUnprepareHeader acmDriverOpen acmStreamMessage acmDriverDetailsA acmStreamOpen acmFormatSuggest acmStreamConvert acmDriverEnum acmStreamPrepareHeader acmMetrics

api-ms-win-crt-string-l1-1-0

memset

dsound

DirectSoundEnumerateA DirectSoundCreate

Name

.text

Size

15.6MB

Virtual Size

15.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

3.5MB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

69B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wd0

Size

559KB

Virtual Size

558KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wd1

Size

639KB

Virtual Size

638KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.wd2

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wd3

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

560KB

Virtual Size

559KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

FLEngine_x64.dll

PE Signature issue

shlwapi

opengl32

version

user32

oleaut32

advapi32

kernel32

wintrust

shfolder

crypt32

gdi32

mpr

winmm

oleacc

wininet

winspool.drv

comdlg32

comctl32

shell32

imagehlp

ole32

msacm32

api-ms-win-crt-string-l1-1-0

dsound

generic