Static task
static1
Behavioral task
behavioral1
Sample
FOBS_B_ver1.05.exe
Resource
win10v2004-20220901-en
General
-
Target
FOBS_B_ver1.05.exe
-
Size
956KB
-
MD5
6c51cf235e063e50ebf90f82fe8eeb1a
-
SHA1
1cf986dfa5c330e3b3220fee48b1e004c0bd601e
-
SHA256
b40e5b786e4ac87a2d72964777d0be96df1629664540c45e273e0abe074c2914
-
SHA512
a01f47d0e9dfe9e348d68fc4995e9a846ff133bfe1eb157be436f9d30b583d9e0c123803a00007e9d8d62fabfce94ca98f2e2ed72b2308398978b69c2bfbec47
-
SSDEEP
6144:wc6jO+Pmk3knp2DLG+5lY6ho/hbSxF8/mOTDoTDbH:wc6S+ukUnp2DK+5Hh62xueOoL
Malware Config
Signatures
Files
-
FOBS_B_ver1.05.exe.exe windows x86
c948c7292a2d330b994a56de77abc32e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntW
lstrcpyW
Sleep
GetOEMCP
GetLastError
LocalFree
FormatMessageW
GlobalFree
GlobalAlloc
ReadFile
CreateFileW
SetFilePointer
CloseHandle
CreateThread
WaitForSingleObject
TerminateThread
SizeofResource
LockResource
FindResourceW
LoadResource
GetModuleHandleW
CopyFileW
GetFileSize
DeleteFileW
WriteFile
FlushFileBuffers
CreateFileA
WritePrivateProfileStringW
GetStringTypeW
GetStringTypeA
LCMapStringW
GetModuleFileNameW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
InitializeCriticalSection
LoadLibraryA
RtlUnwind
HeapReAlloc
VirtualAlloc
IsValidCodePage
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
GetSystemTimeAsFileTime
OutputDebugStringW
FindFirstFileW
FindNextFileW
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
lstrlenW
VirtualFree
HeapCreate
HeapDestroy
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
lstrcpynW
FindClose
GetFullPathNameW
LCMapStringA
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
RaiseException
InterlockedDecrement
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
user32
EndDialog
SetWindowLongW
GetDlgItem
DialogBoxParamW
DispatchMessageW
PeekMessageW
GetKeyState
DefWindowProcW
SetMenuItemInfoW
PostMessageW
UnregisterClassW
DestroyMenu
AdjustWindowRect
LoadMenuW
UpdateWindow
PostQuitMessage
SendMessageW
GetWindowRect
ScreenToClient
LoadIconW
RegisterClassExW
SetCursor
DestroyWindow
GetMenu
GetDC
ReleaseDC
GetDesktopWindow
MessageBoxW
SetWindowPos
GetCursorPos
LoadStringW
GetMenuItemInfoW
ShowWindow
SetMenu
TranslateMessage
CreateWindowExW
gdi32
GetCharWidth32W
GetDeviceCaps
ole32
CoUninitialize
CoInitializeEx
imm32
ImmDisableIME
d3d9
Direct3DCreate9
d3dx9_39
D3DXVec2Normalize
D3DXCreateTextureFromResourceExW
D3DXCreateLine
D3DXCreateSprite
D3DXCreateFontW
D3DXMatrixMultiply
D3DXCreateTextureFromFileInMemoryEx
dsound
ord11
dinput8
DirectInput8Create
winmm
mmioClose
mmioOpenW
mmioAscend
timeBeginPeriod
timeGetDevCaps
mmioRead
mmioSeek
timeGetTime
mmioDescend
Sections
.text Size: 200KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 451KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 712KB - Virtual size: 710KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ