Fatality[.]Swin[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
Fatality.Swin.dll
Size 5.7MB
Sample260916-shdlsacn8x
SHA256 c5750253338182548b61e327a8d88ebbffa929cb3f8fe2c3e31fb6ec1a842196
MD5 284120a82264f3f9f9100ade1a8f9c70
SHA1 3b273ff71342d57161eb1b387137c28e4e23b034
SHA512 9aa2244d463189dbe984cc4a43d3cff6fb1c383de47229445bd18cede4c0f0850c4b9400d2af92014b412247ea1b5008c71ed195a17e2ac01f9a9d10d40f95e1
SSDEEP 98304:wPhBHyDu+HHhKn9FSHB228TO2uBXeVspT/g83j/n:vKn9FSP8TOVeu/Lz/n
TLSH
T1BC56CF17F742557EC51AC83482EB4723723074966B32A6DF61886A366DE73F01F3A788
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Fatality.Swin.dll

File Explorer

Fatality.Swin.dll

.dll 5.7MB

Fatality.Swin.dll

IMPHASH 656f937dbc26ed4c85644144d296cc91
SHA256 c5750253338182548b61e327a8d88ebbffa929cb3f8fe2c3e31fb6ec1a842196
MD5 284120a82264f3f9f9100ade1a8f9c70
SHA1 3b273ff71342d57161eb1b387137c28e4e23b034
SHA512 9aa2244d463189dbe984cc4a43d3cff6fb1c383de47229445bd18cede4c0f0850c4b9400d2af92014b412247ea1b5008c71ed195a17e2ac01f9a9d10d40f95e1
SSDEEP 98304:wPhBHyDu+HHhKn9FSHB228TO2uBXeVspT/g83j/n:vKn9FSP8TOVeu/Lz/n
TLSH
T1BC56CF17F742557EC51AC83482EB4723723074966B32A6DF61886A366DE73F01F3A788
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1434592

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Admin\Documents\Codex\2026-09-01\new-chat\work\bin\cs2.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress

kernel32

GetCurrentThreadId GetCurrentProcessId WriteFile FlushFileBuffers OutputDebugStringA WideCharToMultiByte MultiByteToWideChar GlobalLock GlobalUnlock GlobalAlloc GetModuleHandleA GetModuleFileNameA GetCurrentDirectoryA DisableThreadLibraryCalls CreateThread CloseHandle GetLastError MoveFileExW CreateFileW SetUnhandledExceptionFilter AddVectoredExceptionHandler GetModuleHandleExA GetCurrentProcess FreeLibrary SetLastError RtlCaptureContext GetLocalTime QueryPerformanceFrequency QueryPerformanceCounter WaitForSingleObject CreateFileA GetFileSizeEx ReadFile HeapAlloc HeapReAlloc HeapFree GetProcessHeap MapViewOfFile UnmapViewOfFile CreateFileMappingA WriteConsoleW HeapSize SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage ReadConsoleW GetFileType GetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetTickCount64 LoadLibraryW GetProcAddress CreateDirectoryW GetModuleHandleW GetModuleFileNameW SetEndOfFile GetStartupInfoW CompareStringW LoadLibraryExW InitializeCriticalSectionAndSpinCount SetFilePointerEx GetConsoleMode GetConsoleOutputCP UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW InitializeSListHead ReleaseSRWLockShared AcquireSRWLockShared Sleep FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW CreateFile2 AreFileApisANSI GetFileInformationByHandleEx LocalFree FormatMessageA GetLocaleInfoEx InitOnceBeginInitialize InitOnceComplete GetLogicalProcessorInformationEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList FlsAlloc FlsGetValue FlsSetValue FlsFree RtlUnwind ExitProcess TerminateProcess GetModuleHandleExW IsProcessorFeaturePresent

user32

EmptyClipboard SetClipboardData GetCursorPos CloseClipboard GetWindowLongPtrW LoadCursorW SetCursor OpenClipboard GetAsyncKeyState DefWindowProcA GetSystemMetrics DestroyWindow UnregisterClassA CreateWindowExA RegisterClassExA SetCursorPos MapVirtualKeyW MessageBoxA GetClipboardData

advapi32

RegSetValueExW RegCreateKeyExW RegQueryValueExW RegEnumValueW RegCloseKey RegDeleteValueW RegOpenKeyExW

shell32

SHGetFolderPathW

ole32

CreateStreamOnHGlobal CoCreateInstance CoInitializeEx

d3d11

D3D11CreateDeviceAndSwapChain

Name

.text

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2.0MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

93KB

Virtual Size

93KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_addr

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

248B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Fatality.Swin.dll

api-ms-win-core-synch-l1-2-0

kernel32

user32

advapi32

shell32

ole32

d3d11

generic