Static task
static1
Behavioral task
behavioral1
Sample
Football Manager 2024.exe
Resource
win7-20231023-en
General
-
Target
Football Manager 2024.exe
-
Size
780.1MB
-
MD5
b9dc45c7d3cb9fb151db7a35266423a8
-
SHA1
27ccfea6c585b99e6145e43ba0a59b31c2d394c4
-
SHA256
b65fc5687d558499c88c23e62e956e95a2a7fd967baad37e15faa1c6ad153c26
-
SHA512
91ff6be4d8809ff0e6b5a6dae3c122b25d5ec855d46669eca09a9b970156c4ed10c4ac458ad33b28c98c006c4046e76208c5702b8d189ef9d40fe2ec3f0a3e34
-
SSDEEP
393216:765lUN9DS0IPnqaJNfiqLCLCLCLCLCLCLCLCLCLCLCLCLCLCLCLCLCLCLCLCLCL5:7CmJwnqaJNfiN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Football Manager 2024.exe
Files
-
Football Manager 2024.exe.exe windows:6 windows x86
86f62b49e1930a371e60446d73b4817b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringA
VirtualQuery
LocalAlloc
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
advapi32
RegOpenKeyExA
ole32
CoInitialize
wtsapi32
WTSSendMessageW
user32
GetProcessWindowStation
GetProcessWindowStation
Sections
.text Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp.%�� Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp.%�� Size: 1024B - Virtual size: 532B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp.%�� Size: 7.5MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 214KB - Virtual size: 830KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ