Static task
static1
Behavioral task
behavioral1
Sample
FireTune.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
FireTune.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
firetune-de.chm
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
firetune-de.chm
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
firetune-es.chm
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
firetune-es.chm
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
firetune.chm
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
firetune.chm
Resource
win10v2004-20231222-en
General
-
Target
8cbe39234148db65878a77bbf444a5ed
-
Size
473KB
-
MD5
8cbe39234148db65878a77bbf444a5ed
-
SHA1
7eaba0c3ab1650d67520641ac91c2343c7a8f584
-
SHA256
bc27ecf6160b203ee5eb9a1653ee7d93e77f3d0376d5fa0a73065878e137fea8
-
SHA512
01597c5985da84a9cf99939aaf33450201e9215eb529ab044d416253411545498be24e9406e8f64216c0e82252a07fb599e0a74339f72639871f42e066c53955
-
SSDEEP
12288:/hQB7l/u/mxestHth8dLkBFWalKHWdm2jyy8pSRmJSCC:pWMuE8tiZkb9kHgmby+vSCC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FireTune.exe
Files
-
8cbe39234148db65878a77bbf444a5ed.rar
-
Bulgarian.lng
-
Espal (Colombia).lng
-
FireTune.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 202KB - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Traditional Chinese.lng
-
bosnian.lng
-
brasileiro.lng
-
chinese-gb.lng
-
czech.lng
-
danish.lng
-
deutsch.lng
-
dutch.lng
-
english.lng
-
estonian.lng
-
finnish.lng
-
firetune-de.chm.chm
-
firetune-es.chm.chm
-
firetune.chm.chm
-
french.lng
-
greek.lng
-
hungarian.lng
-
indonesian.lng
-
italian.lng
-
korean.lng
-
lithuanian.lng
-
macedonian.lng
-
norwegian.lng
-
polski.lng
-
portugues.lng
-
readme.txt
-
romanian.lng
-
russian.lng
-
settings.ini
-
slovak.lng
-
slovenian.lng
-
spanish.lng
-
svenska.lng
-
turkish.lng
-
ukrainian.lng
-
下载说明.htm.html .js polyglot