Static task
static1
General
-
Target
FNAFN.exe
-
Size
6.9MB
-
MD5
0cee3a13bc26f024a4236af91d6914f8
-
SHA1
09338f54e33fe9b4fb8d43a196bf8b8690b851f4
-
SHA256
63e60a1d9f3ecda4bbd2e2a3ee76f1c47d262763e7b072a9551903246ec8d31c
-
SHA512
e80d057be4fec240867090ef12ac2a617de569a424277c0d9ad6ae50a32c0a3833a763b565f0131785789d5e4e37666abfaf080f14cdee4458208c04a90f0f85
-
SSDEEP
196608:qV86cVSDlIICJrMPWBYjGvudhG2HZKZ5LG:G8ANHZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FNAFN.exe
Files
-
FNAFN.exe.exe windows x64
b1502cbc0040d3f89dad2a7536cb8a1c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
wininet
InternetCloseHandle
InternetOpenA
InternetCanonicalizeUrlA
InternetReadFile
HttpOpenRequestA
HttpSendRequestA
InternetConnectA
HttpQueryInfoA
InternetGetConnectedState
InternetCrackUrlA
d3d11
D3D11CreateDevice
dbghelp
MiniDumpWriteDump
winmm
joyGetPosEx
joyGetPos
mciSendStringA
timeEndPeriod
timeGetDevCaps
timeBeginPeriod
ws2_32
WSAStartup
socket
setsockopt
sendto
send
select
recvfrom
recv
WSAGetLastError
inet_ntoa
inet_addr
htons
getsockopt
ioctlsocket
connect
closesocket
bind
listen
getaddrinfo
freeaddrinfo
getpeername
__WSAFDIsSet
htonl
ntohs
accept
gdiplus
GdiplusStartup
GdiplusShutdown
comctl32
InitCommonControlsEx
kernel32
SetStdHandle
MoveFileExW
ReadConsoleW
GetTimeZoneInformation
HeapReAlloc
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
WriteFile
GetStdHandle
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
ReadFile
SetFileAttributesW
GetFileAttributesExW
HeapWalk
HeapValidate
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
GetModuleHandleExW
RtlUnwind
EncodePointer
LoadLibraryExW
RtlPcToFileHeader
RtlUnwindEx
GetProcessHeap
HeapFree
HeapAlloc
RaiseException
InitializeSListHead
IsValidCodePage
GetACP
OutputDebugStringA
GetCurrentProcess
GetCommandLineW
ExpandEnvironmentStringsW
CreateDirectoryW
CreateFileW
GetFinalPathNameByHandleW
GetFullPathNameW
CloseHandle
SetUnhandledExceptionFilter
GetLastError
SetErrorMode
Sleep
GetCurrentProcessId
GetCurrentThreadId
GetOEMCP
GetModuleHandleW
MoveFileA
MultiByteToWideChar
WideCharToMultiByte
SetCurrentDirectoryA
GetCurrentDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryW
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
SetWaitableTimer
CreateWaitableTimerW
GetTickCount
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateThread
SetThreadPriority
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetConsoleWindow
GetEnvironmentVariableW
GetCurrentDirectoryW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
SetLastError
GetExitCodeThread
LocalFree
FormatMessageW
GetVersionExW
GetLocaleInfoW
GetUserDefaultLCID
GlobalAlloc
GlobalUnlock
GlobalLock
ExitProcess
lstrlenA
WaitForSingleObjectEx
CreateEventExW
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
SetEndOfFile
HeapSize
GetModuleFileNameW
WriteConsoleW
GetSystemTimeAsFileTime
SetEvent
user32
UpdateWindow
SetCursorPos
GetCursorPos
SetWindowLongPtrW
ChangeDisplaySettingsW
EnumDisplaySettingsW
MonitorFromWindow
GetMonitorInfoW
GetDC
ReleaseDC
MoveWindow
SetWindowTextW
ClientToScreen
MapWindowPoints
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
GetFocus
CreateDialogParamW
DialogBoxParamW
MessageBoxW
GetDlgItem
SetDlgItemTextW
GetDlgItemTextW
GetWindowRect
GetAsyncKeyState
keybd_event
SetDlgItemTextA
GetRawInputDeviceInfoA
GetRawInputDeviceList
SetForegroundWindow
GetSystemMetrics
ReleaseCapture
SetCapture
GetKeyState
BringWindowToTop
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
SendMessageW
GetActiveWindow
LoadImageW
EndDialog
LoadCursorW
SetProcessDPIAware
IsDialogMessageW
SetFocus
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
SetCursor
DrawTextW
AdjustWindowRectEx
wsprintfW
MessageBoxA
ScreenToClient
GetClientRect
gdi32
SelectObject
GetDeviceCaps
GetStockObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
shell32
SHGetFolderPathW
ShellExecuteW
ole32
CoCreateInstance
CoTaskMemFree
CoInitialize
CoCreateFreeThreadedMarshaler
dxgi
CreateDXGIFactory1
rpcrt4
UuidCreate
UuidToStringW
dwmapi
DwmGetCompositionTimingInfo
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
Sections
.text Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 583KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 246KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mydata Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 305KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ