Overview
overview
3Static
static
3Femboy_Bur...es.txt
windows7-x64
1Femboy_Bur...es.txt
windows10-2004-x64
1Femboy_Bur...rs.exe
windows7-x64
1Femboy_Bur...rs.exe
windows10-2004-x64
1Femboy_Bur...ok.pdf
windows7-x64
1Femboy_Bur...ok.pdf
windows10-2004-x64
1Femboy_Bur...p1.dat
windows7-x64
3Femboy_Bur...p1.dat
windows10-2004-x64
3Femboy_Bur...p2.dat
windows7-x64
3Femboy_Bur...p2.dat
windows10-2004-x64
3Femboy_Bur...ta.win
windows7-x64
3Femboy_Bur...ta.win
windows10-2004-x64
3Femboy_Bur...ns.ini
windows7-x64
1Femboy_Bur...ns.ini
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Femboy_Burgers_EarlyAccess_v0.3.3/Eros Hen Games.txt
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Femboy_Burgers_EarlyAccess_v0.3.3/Eros Hen Games.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
Femboy_Burgers_EarlyAccess_v0.3.3/Femboy Burgers.exe
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
Femboy_Burgers_EarlyAccess_v0.3.3/Femboy Burgers.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
Femboy_Burgers_EarlyAccess_v0.3.3/Thank you for buying the game!/Femboy Burger Artbook.pdf
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
Femboy_Burgers_EarlyAccess_v0.3.3/Thank you for buying the game!/Femboy Burger Artbook.pdf
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
Femboy_Burgers_EarlyAccess_v0.3.3/audiogroup1.dat
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
Femboy_Burgers_EarlyAccess_v0.3.3/audiogroup1.dat
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
Femboy_Burgers_EarlyAccess_v0.3.3/audiogroup2.dat
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
Femboy_Burgers_EarlyAccess_v0.3.3/audiogroup2.dat
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
Femboy_Burgers_EarlyAccess_v0.3.3/data.win
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
Femboy_Burgers_EarlyAccess_v0.3.3/data.win
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
Femboy_Burgers_EarlyAccess_v0.3.3/options.ini
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
Femboy_Burgers_EarlyAccess_v0.3.3/options.ini
Resource
win10v2004-20230703-en
General
-
Target
FB v0.3.3 (Eros Hen Games).rar
-
Size
151.1MB
-
MD5
0f4944b61d9d0e49d430afe99fc31d51
-
SHA1
da3e683a2be453feda0f5343e07a09f79aac2f98
-
SHA256
7725f9570ee5b5c43429731d98cbc99fee12c088d36eb523ddb8d5afce4e05ab
-
SHA512
533514fb6f4f40f9648515c64eaa2bb75c735c93c11489e268bd970a17cc47e57068e546c4279915ae454a3404a863d1db5f1c493d20d68b2e4e882d5850c45a
-
SSDEEP
3145728:mwjm6Z5Br3uCIJaz+K8cNuzLuuuUEvp2SW7teMd5g+X0REKL:lV5FlIJgOQOhBhpd5OfL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Femboy_Burgers_EarlyAccess_v0.3.3/Femboy Burgers.exe
Files
-
FB v0.3.3 (Eros Hen Games).rar.rar
-
Femboy_Burgers_EarlyAccess_v0.3.3/Eros Hen Games.txt
-
Femboy_Burgers_EarlyAccess_v0.3.3/Femboy Burgers.exe.exe windows x64
2ecb66be9079098b70a8aac7848731ec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
rpcrt4
UuidCreate
UuidToStringW
wininet
InternetConnectA
InternetReadFile
InternetWriteFile
InternetCloseHandle
InternetOpenA
InternetCanonicalizeUrlA
InternetCrackUrlA
HttpOpenRequestA
HttpSendRequestA
HttpEndRequestW
HttpQueryInfoA
InternetGetConnectedState
d3d11
D3D11CreateDevice
dxgi
CreateDXGIFactory1
dbghelp
MiniDumpWriteDump
SymInitialize
SymFromAddr
winmm
mciSendStringA
joyGetPosEx
joyGetPos
timeGetTime
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
mciGetErrorStringA
ws2_32
sendto
getsockname
recvfrom
recv
listen
inet_ntoa
inet_addr
getsockopt
ioctlsocket
socket
closesocket
bind
accept
getpeername
select
__WSAFDIsSet
ntohs
ntohl
htons
htonl
setsockopt
gethostname
WSAStartup
WSACleanup
WSAGetLastError
WSAAddressToStringA
getaddrinfo
connect
freeaddrinfo
inet_ntop
send
gdiplus
GdiplusShutdown
GdiplusStartup
comctl32
InitCommonControlsEx
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
mfplat
MFCreateMediaType
MFShutdown
MFStartup
MFCreateSourceResolver
mf
MFCreateMediaSession
MFCreateSampleGrabberSinkActivate
MFCreateAudioRendererActivate
MFGetService
MFCreateTopologyNode
MFCreateTopology
kernel32
HeapReAlloc
GetTimeZoneInformation
SetStdHandle
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetTempPathW
SetConsoleCtrlHandler
WriteFile
GetStdHandle
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
ReadFile
IsValidCodePage
SetFileAttributesW
GetFileAttributesExW
GetModuleHandleExW
HeapWalk
HeapValidate
RtlUnwind
LoadLibraryExW
InterlockedFlushSList
InterlockedPushEntrySList
RtlPcToFileHeader
RtlUnwindEx
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
InitializeSListHead
RaiseException
GetStartupInfoW
IsDebuggerPresent
CreateEventW
ResetEvent
SetEvent
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
GetACP
GetOEMCP
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
GetCommandLineA
SetCurrentDirectoryW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
OutputDebugStringW
SetEndOfFile
HeapSize
MoveFileExW
RtlCaptureStackBackTrace
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryW
WideCharToMultiByte
GetLastError
LoadLibraryA
MultiByteToWideChar
CloseHandle
WaitForSingleObjectEx
CreateEventExW
OutputDebugStringA
GetConsoleWindow
GetCurrentDirectoryW
DeleteFileW
GetFullPathNameW
SetLastError
CreateThread
GetExitCodeThread
GetModuleHandleW
LocalFree
FormatMessageW
SetCurrentDirectoryA
GetCurrentDirectoryA
FreeLibrary
GetEnvironmentVariableW
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
Sleep
GetExitCodeProcess
CreateProcessW
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
SetWaitableTimer
CreateWaitableTimerW
GetTickCount64
GetFileAttributesA
GetCurrentProcess
GetCurrentThread
SetThreadPriority
SetPriorityClass
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalMemoryStatusEx
GetSystemInfo
GetVersionExW
GetLocaleInfoW
GetUserDefaultLCID
VerSetConditionMask
VerifyVersionInfoW
GetCurrentProcessId
DebugBreak
GetEnvironmentVariableA
ExitProcess
lstrlenA
GetCommandLineW
ExpandEnvironmentStringsW
CreateFileW
GetFinalPathNameByHandleW
SetUnhandledExceptionFilter
SetErrorMode
GetCurrentThreadId
GetModuleFileNameW
MoveFileA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoEx
GetCPInfo
CompareStringEx
LCMapStringEx
DecodePointer
EncodePointer
CreateSymbolicLinkW
GetFileInformationByHandleEx
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
InitOnceExecuteOnce
FlsFree
FlsSetValue
FlsGetValue
DeleteCriticalSection
FlsAlloc
SetFileInformationByHandle
FormatMessageA
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
WriteConsoleW
user32
GetMonitorInfoW
UpdateWindow
GetForegroundWindow
SetProcessDPIAware
IsDialogMessageW
MonitorFromWindow
DispatchMessageW
TranslateMessage
SetDlgItemTextA
MessageBoxA
GetFocus
IsClipboardFormatAvailable
EnumDisplaySettingsW
PeekMessageW
SetWindowLongPtrW
GetRawInputDeviceInfoA
GetRawInputDeviceList
MessageBoxW
SendMessageW
PostMessageW
DefWindowProcW
RegisterClassExW
CreateWindowExW
DestroyWindow
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
keybd_event
GetAsyncKeyState
wsprintfW
GetCursorPos
GetActiveWindow
MapWindowPoints
ClientToScreen
SetCursorPos
MoveWindow
ScreenToClient
SetWindowTextW
ReleaseDC
GetDC
DrawTextW
GetDlgItemTextW
SetDlgItemTextW
GetDlgItem
DialogBoxParamW
CreateDialogParamW
LoadImageW
LoadCursorW
CallNextHookEx
SetCursor
AdjustWindowRectEx
GetWindowRect
GetClientRect
SetForegroundWindow
GetSystemMetrics
ReleaseCapture
SetCapture
GetKeyState
SetFocus
BringWindowToTop
SetWindowPos
ShowWindow
EndDialog
gdi32
GetDeviceCaps
SelectObject
GetStockObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
ShellExecuteW
SHGetFolderPathW
ole32
CoCreateFreeThreadedMarshaler
CoInitialize
CoTaskMemFree
CoCreateInstance
dwmapi
DwmGetCompositionTimingInfo
Sections
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 554KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
minATL Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mydata Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Femboy_Burgers_EarlyAccess_v0.3.3/Thank you for buying the game!/Femboy Burger Artbook.pdf.pdf
-
Femboy_Burgers_EarlyAccess_v0.3.3/audiogroup1.dat
-
Femboy_Burgers_EarlyAccess_v0.3.3/audiogroup2.dat
-
Femboy_Burgers_EarlyAccess_v0.3.3/data.win
-
Femboy_Burgers_EarlyAccess_v0.3.3/options.ini