Static task
static1
General
-
Target
fairchild_city_air_metroliner_iii_fs2004.exe
-
Size
17.7MB
-
MD5
8ee760c8a2226bfcd8a99711fc916fbf
-
SHA1
c79a897cfdd6d3cb8c6d214a7b65198e10ce467a
-
SHA256
524867878bdfadf8fee46706274e9cb8a0951f0abe8456d1efead8ce3e2b038f
-
SHA512
022068f4350a5d5b01663b74d7b6eb15173ce263c269f990f4c44ef80c790ade657369883fc0928f6e1d61684f0e094f6d886281461b97e0d8ee98d8822c3e2f
-
SSDEEP
393216:wEvIJ6A5PfgA82lVX6NgB9pFQ8b+zLD5hvchzkz4RtAcUdca3gr:w5J6A53flCqpEzXv4z84RtAlcrr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fairchild_city_air_metroliner_iii_fs2004.exe
Files
-
fairchild_city_air_metroliner_iii_fs2004.exe.exe windows x86
65030388c46174af1fa841078681b9c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
HeapFree
OutputDebugStringA
CloseHandle
GetExitCodeProcess
GetLastError
lstrlenA
lstrcpynA
UnmapViewOfFile
WideCharToMultiByte
MultiByteToWideChar
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetCommandLineA
ExitProcess
Sleep
DeleteFileA
SetFileAttributesA
GetFileAttributesA
lstrcatA
GetTempPathA
GetModuleFileNameA
GetSystemInfo
GetProcAddress
GetModuleHandleA
GetVersionExA
GetCurrentProcessId
GetProcessHeap
ReadFile
WriteFile
SetFileTime
SetFilePointer
shell32
ShellExecuteExA
user32
MessageBoxA
wvsprintfA
PeekMessageA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
wsprintfA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 348KB - Virtual size: 347KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ