Static task
static1
Behavioral task
behavioral1
Sample
Facebook Hacker/Builder.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Facebook Hacker/Builder.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
Facebook Hacker/FH Stub.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Facebook Hacker/FH Stub.exe
Resource
win10v2004-20231215-en
General
-
Target
52fe0e5c3bd5838c0aeac261bf21955c
-
Size
32KB
-
MD5
52fe0e5c3bd5838c0aeac261bf21955c
-
SHA1
ab69ae1157d31fce60860c0878ee8d9f81cbb235
-
SHA256
1ce8eaa54f1c3e13316c96548bf694722b3ea122de5aba3e14ba635489ba20b4
-
SHA512
e0081c00c9704b7ded86fd2eb972b5c9b14eb1127b3868d5122b6147203672a058e3a062e6cef7ebccefdfc0af6a3c705a794c1c7a73fc4ca1a99b219ed0eb01
-
SSDEEP
768:36V7zdvs5R9jOJ68K+2mucXTVx2cKd9l2/IoA/j6jdhunGijE4kWXMddX/:3e7xE5zj7+/DT0d9lklg6jdhuGijxpXS
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Facebook Hacker/Builder.exe unpack001/Facebook Hacker/FH Stub.exe
Files
-
52fe0e5c3bd5838c0aeac261bf21955c.rar
-
Facebook Hacker/Builder.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 187B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Facebook Hacker/FH Stub.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 163B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Facebook Hacker/Instructions & Installation.txt