fatalitycrack[.]dll

General

Target
fatalitycrack.dll
Size 4.1MB
Sample261102-sjbhtac16p
SHA256 7c2f4e75bb849f17f4469255b16084db2197a2dc8643ced238911c59b931cae1
MD5 13402566211c66da2b37cc8369241390
SHA1 a7d8a0ca758ebd922b6bd46e780273cbc44119d1
SHA512 1acaec09a212ea77dbdf338d2dac4acf547ed042cf1ab02dad760ec92609ea0a9406074da8df3a93db372fc2dccf470fe2b7cb34b4eeec72269088d94ffb4f5d
SSDEEP 98304:3FxUSr+n+W9DSuVd0RFLU48ufu8y1Fg9EvTIiLyEcHu:3FxU4+hRsLU8o169EbIiL3cHu
TLSH
T1E916330F23B5169EF56B813CB0530F458B7ABC284BD49BDF4258416AAE4B3C9AD335E4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fatalitycrack.dll

File Explorer

fatalitycrack.dll

.dll 4.1MB

fatalitycrack.dll

IMPHASH b6ccdbfd1e511e0c0e59b394577a4802
SHA256 7c2f4e75bb849f17f4469255b16084db2197a2dc8643ced238911c59b931cae1
MD5 13402566211c66da2b37cc8369241390
SHA1 a7d8a0ca758ebd922b6bd46e780273cbc44119d1
SHA512 1acaec09a212ea77dbdf338d2dac4acf547ed042cf1ab02dad760ec92609ea0a9406074da8df3a93db372fc2dccf470fe2b7cb34b4eeec72269088d94ffb4f5d
SSDEEP 98304:3FxUSr+n+W9DSuVd0RFLU48ufu8y1Fg9EvTIiLyEcHu:3FxU4+hRsLU8o169EbIiL3cHu
TLSH
T1E916330F23B5169EF56B813CB0530F458B7ABC284BD49BDF4258416AAE4B3C9AD335E4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5380

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle CreateProcessA DisableThreadLibraryCalls lstrcpyA lstrcatA RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW WriteConsoleW RtlUnwindEx InterlockedFlushSList GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW GetProcessHeap GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

Name

.text

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.expdata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

fatalitycrack.dll

kernel32

generic