Static task
static1
Behavioral task
behavioral1
Sample
File-Factorio.v1.1.94_621403.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
File-Factorio.v1.1.94_621403.exe
Resource
win10v2004-20231215-en
General
-
Target
File-Factorio.v1.1.94_621403.exe
-
Size
2.7MB
-
MD5
47c6248c61d27d2aac02299568dad8f5
-
SHA1
87d5d2b6b9e7b6f7fdd316eb500987fbf8cd13f0
-
SHA256
7161051f2cda2f3184ea630735ddb9929951d324dae53860b08f540eebcb5c43
-
SHA512
38270f6fd07749740deefe4ba1bdf6b5ff6209a7bbb9bc05d027d3071b8ec1697186d0bbfe5384d4626673249a760d67db64e9bea6e5859ccdf1c0550aadddc2
-
SSDEEP
49152:7kQqe5vs+HbhCc7YvgLPkLUX0FilDCIr1QN/Way:7kQqeJs+HbhF7YvMvUiMI+Oh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource File-Factorio.v1.1.94_621403.exe
Files
-
File-Factorio.v1.1.94_621403.exe.exe windows:4 windows x86 arch:x86
c818f0e720fa73c83a1e6c1fe7f04039
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetConsoleMode
GetVersionExA
GetACP
RtlUnwind
GetLocaleInfoA
GetTimeZoneInformation
IsDebuggerPresent
CreateFileW
WriteFile
CreateFileA
FindFirstFileA
GetLocaleInfoW
ResetEvent
FreeLibrary
GetCommandLineA
GlobalLock
EnumResourceLanguagesA
GetDriveTypeA
GetProcAddress
GetCurrentThread
GetModuleFileNameA
DeviceIoControl
CreateEventA
GetCurrentDirectoryW
GetCurrentThreadId
GetTickCount64
GlobalSize
GetOEMCP
FreeEnvironmentStringsW
LockResource
FileTimeToLocalFileTime
GetThreadLocale
CreateDirectoryW
EnumResourceNamesA
GetSystemInfo
LocalAlloc
FindFirstFileExW
LoadResource
GetProcessHeap
FindClose
EnumResourceTypesA
TlsGetValue
GetStartupInfoA
GlobalDeleteAtom
WaitForSingleObject
FormatMessageW
ReadFile
TerminateThread
FormatMessageA
LocalFree
GetExitCodeProcess
OpenThread
GetWindowsDirectoryA
SetEndOfFile
SizeofResource
GetUserDefaultLCID
VirtualProtect
CreateThread
SuspendThread
GetCommandLineW
DeleteCriticalSection
PeekNamedPipe
GetDateFormatA
WideCharToMultiByte
TlsAlloc
CreateToolhelp32Snapshot
EnumCalendarInfoA
GlobalAlloc
GetConsoleOutputCP
FreeResource
SetThreadLocale
HeapFree
GetFileAttributesW
HeapAlloc
GetCurrentProcess
Process32FirstW
CreateMutexA
TryEnterCriticalSection
LoadLibraryA
GetCurrentProcessId
GetTickCount
GlobalUnlock
VirtualFree
GetModuleHandleA
CompareStringW
FindNextFileW
CreateProcessW
InitializeCriticalSection
EnterCriticalSection
IsBadReadPtr
TlsSetValue
CloseHandle
ResumeThread
RaiseException
LoadLibraryW
GetFullPathNameW
FindResourceA
VirtualAlloc
MultiByteToWideChar
GlobalAddAtomA
FindNextFileA
GetCPInfo
GetFileSize
SetThreadPriority
ReadProcessMemory
FileTimeToDosDateTime
GetLastError
CompareStringA
MoveFileW
GetExitCodeThread
GetLocalTime
Sleep
GetStdHandle
Process32NextW
GetConsoleCP
ExitThread
FindResourceExA
LeaveCriticalSection
GetEnvironmentStringsW
ExitProcess
SetEvent
GetThreadPriority
SetLastError
GetDateFormatW
GlobalReAlloc
SetFilePointer
MulDiv
GetModuleFileNameW
oleaut32
SafeArrayPtrOfIndex
SysFreeString
SafeArrayAccessData
SafeArrayGetElement
SafeArrayRedim
VariantChangeTypeEx
SysAllocStringLen
SafeArrayGetUBound
VariantClear
VariantCopy
SafeArrayGetLBound
SysReAllocStringLen
SafeArrayUnaccessData
SafeArrayCreate
VariantInit
SafeArrayPutElement
user32
ChildWindowFromPointEx
DestroyMenu
SetMenu
SetSysColors
SetWindowLongA
ScreenToClient
SetWindowTextW
IsWindowVisible
GetSystemMenu
InvalidateRect
CountClipboardFormats
GetSubMenu
IntersectRect
GetParent
GetWindowPlacement
DrawEdge
LoadCursorA
CharLowerA
RedrawWindow
PeekMessageW
HideCaret
SetActiveWindow
GetSystemMetrics
CreateIconIndirect
GetSysColor
EndPaint
GetTopWindow
FlashWindowEx
LoadIconA
MessageBoxW
PostMessageA
RemovePropA
CopyImage
MoveWindow
DestroyIcon
DrawStateW
GetDC
ScrollWindowEx
IsMenu
SetTimer
GetActiveWindow
CharUpperBuffA
FillRect
DrawMenuBar
DispatchMessageW
GetWindowRect
CreateCaret
GetClassInfoW
GetWindowThreadProcessId
GetCursorPos
ClientToScreen
GetWindowLongA
ReleaseDC
GetSysColorBrush
SetParent
BringWindowToTop
GetWindowTextLengthW
CallWindowProcW
GetWindowTextW
BeginDeferWindowPos
ShowScrollBar
CharLowerBuffW
SetPropA
FindWindowExW
EmptyClipboard
DestroyCaret
EnableWindow
GetWindowDC
GetMenuItemRect
SetCaretPos
SetWindowPlacement
TrackPopupMenuEx
SetScrollInfo
FrameRect
GetMenuItemInfoA
InvalidateRgn
EndDeferWindowPos
CallWindowProcA
GetFocus
SetWindowPos
IsIconic
GetLastActivePopup
IsZoomed
SendMessageA
DrawIconEx
GetClipboardFormatNameA
GetForegroundWindow
DestroyCursor
SetCursorPos
OpenClipboard
PostQuitMessage
CreateMenu
CharUpperA
IsWindowEnabled
EnableScrollBar
UnregisterClassW
IsClipboardFormatAvailable
TranslateMDISysAccel
GetMenuItemCount
CharToOemA
DeleteMenu
DrawFocusRect
GetWindowLongW
GetDesktopWindow
GetCaretPos
EnumThreadWindows
DefFrameProcW
SystemParametersInfoA
RegisterClassW
KillTimer
DefWindowProcW
GetIconInfo
CallNextHookEx
RemoveMenu
WindowFromPoint
RegisterClassA
DeferWindowPos
MsgWaitForMultipleObjects
DefWindowProcA
ReleaseCapture
SendMessageW
SetForegroundWindow
GetKeyState
DrawTextW
ShowOwnedPopups
CreateWindowExW
WindowFromDC
GetDoubleClickTime
GetUpdateRect
EnableMenuItem
GetClipboardData
SetFocus
SetWindowRgn
GetMenu
RegisterClipboardFormatA
TranslateMessage
UnregisterClassA
GetClassInfoA
MapWindowPoints
SetMenuItemInfoW
MessageBoxA
SetCursor
LoadImageA
CloseClipboard
LoadBitmapA
InflateRect
GetPropA
DefMDIChildProcW
SetCapture
AdjustWindowRectEx
IsWindow
GetClassNameA
SetWindowLongW
GetClientRect
PeekMessageA
GetCapture
InsertMenuItemW
MessageBeep
CreatePopupMenu
SetClassLongA
OffsetRect
CreateWindowExA
GetMenuItemInfoW
DestroyWindow
GetClassLongA
GetDCEx
GetScrollInfo
SetClipboardData
CharUpperBuffW
ShowWindowAsync
GetWindow
ShowCaret
ShowWindow
DrawFrameControl
SetRect
UpdateWindow
EnumPropsA
CharLowerBuffA
BeginPaint
EnumClipboardFormats
SwitchToThisWindow
advapi32
OpenServiceW
OpenProcessToken
QueryServiceStatus
RegQueryValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegFlushKey
RegOpenKeyExW
RegCreateKeyExW
RegEnumValueW
GetUserNameA
RegCloseKey
GetTokenInformation
OpenSCManagerW
AdjustTokenPrivileges
LookupPrivilegeValueA
gdi32
GetBkColor
CreatePen
SetBrushOrgEx
CreateRectRgn
OffsetViewportOrgEx
EnumFontFamiliesExW
GetTextMetricsA
CreateFontIndirectW
LineTo
IntersectClipRect
CreateEllipticRgn
SetBkMode
BitBlt
GetViewportOrgEx
GetRegionData
RectVisible
SetViewportExtEx
GetDIBits
GetTextAlign
GetDeviceCaps
GetCharABCWidthsW
ExcludeClipRect
EnumFontFamiliesA
RealizePalette
GetCurrentObject
SetTextCharacterExtra
ExtSelectClipRgn
EqualRgn
Pie
GetClipRgn
GetObjectA
ExtCreateRegion
GetObjectType
CreateRoundRectRgn
SetArcDirection
PtInRegion
CombineRgn
SelectPalette
SetWindowExtEx
ExtTextOutA
Chord
MaskBlt
LPtoDP
RestoreDC
GetBitmapBits
TextOutW
SetRectRgn
GetClipBox
Polygon
GetMapMode
CreateDIBSection
Arc
PolyBezier
CreatePolygonRgn
DeleteObject
GetPixel
SetTextColor
GetROP2
MoveToEx
CreateCompatibleBitmap
ExtCreatePen
DPtoLP
GetWindowExtEx
CreateBrushIndirect
GetDCOrgEx
GetTextExtentPointA
GetWindowOrgEx
SetViewportOrgEx
ExtTextOutW
GetRgnBox
GetCharABCWidthsA
PaintRgn
SaveDC
SelectClipRgn
GetRandomRgn
CreateFontIndirectA
DeleteDC
StretchBlt
SetStretchBltMode
SetPixel
ExtFloodFill
RoundRect
GetTextExtentExPointW
SetTextAlign
CreatePatternBrush
CreateCompatibleDC
CreateDIBitmap
OffsetRgn
RectInRegion
Rectangle
CreatePenIndirect
SetWindowOrgEx
SetMapMode
SetBkColor
PatBlt
Polyline
GetViewportExtEx
SelectObject
GetObjectW
SetROP2
CreateBitmap
Ellipse
GetStockObject
FillRgn
GetTextColor
SetPolyFillMode
CreateSolidBrush
GetTextExtentPoint32W
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
shell32
DragAcceptFiles
DragQueryFileA
SHGetFolderPathW
DragQueryFileW
DragFinish
ShellExecuteW
ShellExecuteExW
SHGetKnownFolderPath
ole32
OleInitialize
OleUninitialize
comctl32
_TrackMouseEvent
ImageList_SetImageCount
ImageList_DragEnter
ImageList_Create
ImageList_AddMasked
ImageList_DrawEx
ImageList_GetImageCount
ImageList_DrawIndirect
ImageList_Replace
ImageList_DragShowNolock
InitCommonControls
ImageList_Destroy
ImageList_EndDrag
ImageList_Copy
ImageList_Remove
ImageList_Add
ImageList_BeginDrag
ImageList_DragLeave
ImageList_DragMove
psapi
EnumProcessModules
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 708KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 374KB - Virtual size: 373KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 47KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ