Static task
static1
Behavioral task
behavioral1
Sample
FazbearEntertainmentStoragev1.0.6.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
FazbearEntertainmentStoragev1.0.6.exe
Resource
win10v2004-20230220-en
General
-
Target
FazbearEntertainmentStoragev1.0.6.exe
-
Size
4.2MB
-
MD5
badca9f373a7710c5ca80899fd142e4f
-
SHA1
d394ca681046d16e29ecfc6c69e8ee367d999c85
-
SHA256
f24cbffb28f4e27bab9704560f85c6131025a47949417c047cabe20ba071a94c
-
SHA512
986f4e5603d420ec12e640e023a85263adae8ad17cff0b27c0ce919c36284e5a1691b8663596d96d95ad18750b13e321d59de7ccd4651bb623c24708476b5549
-
SSDEEP
49152:F3wAodQ91UcVUFWPFVjI+bPb4fuJXsvgKbV0RnLMBTWdjeJN:F/odyacVUKjOuJX3KSRnLM0dj8
Malware Config
Signatures
Files
-
FazbearEntertainmentStoragev1.0.6.exe.exe windows x86
3edc4485030b7bbdd74e32ebc647287c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenA
HttpEndRequestW
InternetWriteFile
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetCrackUrlA
InternetCanonicalizeUrlA
HttpSendRequestA
InternetGetConnectedState
InternetConnectA
HttpOpenRequestA
d3dx9_43
D3DXGetVertexShaderProfile
D3DXCompileShader
D3DXGetPixelShaderProfile
D3DXCreateTextureFromFileW
D3DXGetImageInfoFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
dbghelp
MiniDumpWriteDump
SymInitialize
SymFromAddr
winmm
mciGetErrorStringA
joyGetPos
joyGetPosEx
joyGetDevCapsA
mciSendStringA
ws2_32
bind
socket
ioctlsocket
setsockopt
inet_addr
WSACleanup
WSAStartup
shutdown
closesocket
gethostname
listen
getaddrinfo
WSAAddressToStringA
freeaddrinfo
getpeername
select
__WSAFDIsSet
htons
htonl
ntohs
ntohl
accept
recv
inet_ntoa
recvfrom
WSAGetLastError
send
connect
sendto
getsockopt
gdiplus
GdiplusShutdown
GdiplusStartup
comctl32
InitCommonControlsEx
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
kernel32
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
LCMapStringA
CreateFileA
GetFullPathNameA
SetConsoleCtrlHandler
SetFilePointer
SetStdHandle
ReadFile
VirtualAlloc
VirtualFree
HeapDestroy
HeapCreate
FatalAppExitA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
WriteFile
HeapSize
SetLastError
GetStdHandle
SetHandleCount
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
CreateDirectoryA
GetFileType
PeekNamedPipe
GetFileInformationByHandle
DeleteFileA
FindNextFileA
GetDateFormatA
GetTimeFormatA
GetFileAttributesA
DebugBreak
GetSystemTimeAsFileTime
SetFileAttributesW
HeapReAlloc
FindFirstFileA
MultiByteToWideChar
GetConsoleWindow
WideCharToMultiByte
OutputDebugStringW
FormatMessageW
GetLastError
GetProcAddress
LoadLibraryW
GetFullPathNameW
GetCurrentDirectoryW
LocalFree
GetModuleHandleW
FreeEnvironmentStringsA
InterlockedIncrement
CreateThread
GetExitCodeThread
CloseHandle
DeleteFileW
Sleep
FreeLibrary
SetCurrentDirectoryA
GetCurrentDirectoryA
GetExitCodeProcess
CreateProcessW
GetEnvironmentVariableW
FindClose
FindNextFileW
RemoveDirectoryW
FindFirstFileW
GetFileAttributesW
CreateDirectoryW
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
SetWaitableTimer
CreateWaitableTimerW
SetThreadPriority
SetPriorityClass
GetCurrentProcess
GetCurrentThread
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersionExW
GetUserDefaultLCID
GetLocaleInfoW
GetSystemInfo
GlobalMemoryStatusEx
ExitProcess
lstrlenA
ExpandEnvironmentStringsW
GetModuleFileNameW
GetCurrentThreadId
MoveFileA
SetUnhandledExceptionFilter
SetErrorMode
GetCommandLineW
GetCurrentProcessId
CreateFileW
RtlCaptureStackBackTrace
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsSetValue
TlsGetValue
TlsFree
RtlUnwind
RaiseException
LoadLibraryA
InterlockedExchange
LocalAlloc
HeapWalk
HeapFree
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
GetEnvironmentStrings
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
GetProcessHeap
SetEnvironmentVariableW
InterlockedDecrement
VirtualQuery
HeapValidate
user32
GetDC
GetDlgItem
DialogBoxParamW
MoveWindow
ClientToScreen
GetMonitorInfoW
SetCursorPos
MapWindowPoints
GetRawInputDeviceInfoA
GetRawInputDeviceList
GetCursorPos
GetForegroundWindow
wsprintfW
GetActiveWindow
DispatchMessageW
TranslateMessage
GetMessageW
EnumDisplaySettingsW
ChangeDisplaySettingsW
SetWindowLongW
UpdateWindow
EnumDisplaySettingsExW
EnumDisplayDevicesA
keybd_event
DrawTextW
SetWindowTextA
SetWindowTextW
CloseClipboard
GetClipboardData
OpenClipboard
SetClipboardData
EmptyClipboard
GetFocus
MessageBoxA
SetDlgItemTextA
IsDialogMessageW
PeekMessageW
DestroyWindow
ShowWindow
BringWindowToTop
SetForegroundWindow
SetWindowPos
GetSystemMetrics
AdjustWindowRectEx
LoadImageW
LoadCursorW
RegisterClassExW
CreateWindowExW
SendMessageW
ReleaseDC
GetAsyncKeyState
ScreenToClient
SetCursor
GetClientRect
GetWindowRect
PostMessageW
CreateDialogParamW
EndDialog
GetDlgItemTextW
IsClipboardFormatAvailable
SetFocus
DefWindowProcW
ReleaseCapture
SetCapture
GetKeyState
CallNextHookEx
MessageBoxW
SetDlgItemTextW
gdi32
GetDeviceCaps
CreateFontA
SelectObject
DeleteObject
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
shell32
ShellExecuteW
SHGetFolderPathW
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
SysAllocString
VariantClear
SysFreeString
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 896KB - Virtual size: 895KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 310KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mydata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ