Static task
static1
Behavioral task
behavioral1
Sample
Future_Fragments.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Future_Fragments.exe
Resource
win10v2004-20240221-en
General
-
Target
Future_Fragments.exe
-
Size
377.6MB
-
MD5
94875a7521e2ed5360062dd18dac920a
-
SHA1
2b130163da035eed845840ee7fa81582510aef82
-
SHA256
2085278e881ab9b64c3c27a6448e567d8aa6766124b9bdfa8e1247e2a40c7438
-
SHA512
8cf51be2341be17726e9c3de0bc0f2c82a85eae4ed4ca5c9f75833727faa05f02490019e657d0f9a3ab07abe0488fcd23a0c5ee5da20feff985f3d7908b5cc80
-
SSDEEP
6291456:FcRvZBm8e8YY/Eqa+gwKz+JoRtrMaKxrnijpirhli5hcD2RDzt1N9Bk/LHZGfriJ:FcRR0qdJoPXKxrnijpi3n237q/DZGD4b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Future_Fragments.exe
Files
-
Future_Fragments.exe.exe windows:5 windows x86 arch:x86
55d022ecbc31ac9836f7afff0d16bbe9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetOpenA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetGetConnectedState
d3dx9_43
D3DXGetVertexShaderProfile
D3DXCompileShader
D3DXGetPixelShaderProfile
D3DXCreateTextureFromFileW
D3DXGetImageInfoFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
dbghelp
SymFromAddr
SymInitialize
winmm
joyGetPos
joyGetDevCapsA
joyGetPosEx
mciSendStringA
mciGetErrorStringA
ws2_32
ntohs
htonl
htons
getpeername
__WSAFDIsSet
select
freeaddrinfo
WSAGetLastError
closesocket
sendto
connect
inet_addr
shutdown
WSAStartup
getsockopt
setsockopt
ioctlsocket
socket
bind
getaddrinfo
send
recvfrom
inet_ntoa
recv
accept
listen
gdiplus
GdiplusStartup
GdiplusShutdown
comctl32
InitCommonControlsEx
kernel32
GetTempPathA
FindFirstFileExW
SetFileAttributesW
GetFileAttributesExW
ReadFile
HeapWalk
HeapValidate
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
FindFirstFileExA
LoadLibraryExA
GetDriveTypeW
SetEnvironmentVariableW
SetEnvironmentVariableA
GetFileInformationByHandle
PeekNamedPipe
MoveFileExW
ReadConsoleW
SetFilePointer
FindNextFileA
FileTimeToLocalFileTime
lstrlenA
GlobalAlloc
GlobalLock
GlobalUnlock
SetPriorityClass
CreateDirectoryW
GetFileAttributesW
FindFirstFileW
RemoveDirectoryW
FindNextFileW
FindClose
CreateProcessW
GetExitCodeProcess
DeleteFileW
GetExitCodeThread
FormatMessageW
LocalFree
GetCurrentDirectoryW
GlobalMemoryStatusEx
GetSystemInfo
GetLocaleInfoW
GetUserDefaultLCID
GetVersionExW
GetEnvironmentVariableW
SetEndOfFile
TlsAlloc
EncodePointer
DecodePointer
GetCommandLineA
IsProcessorFeaturePresent
GetLastError
HeapFree
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
HeapSize
Sleep
SetLastError
InterlockedIncrement
GetCurrentThread
GetCurrentThreadId
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
OutputDebugStringW
LoadLibraryW
GetTimeFormatEx
GetDateFormatEx
CompareStringEx
GetLocaleInfoEx
GetUserDefaultLocaleName
LCMapStringEx
IsValidLocaleName
EnumSystemLocalesEx
GetStringTypeW
RaiseException
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
ExpandEnvironmentStringsW
MoveFileA
GetFullPathNameW
SetErrorMode
GetCommandLineW
GetCurrentProcessId
RtlCaptureStackBackTrace
GetTickCount
QueryPerformanceFrequency
WaitForSingleObject
SetWaitableTimer
CreateWaitableTimerW
TlsSetValue
SetThreadPriority
CreateThread
GetConsoleWindow
SetCurrentDirectoryA
GetCurrentDirectoryA
user32
DialogBoxParamW
GetDlgItem
DrawTextW
ScreenToClient
keybd_event
EndDialog
GetDlgItemTextW
SetDlgItemTextW
MapWindowPoints
GetMonitorInfoW
GetAsyncKeyState
SetDlgItemTextA
GetRawInputDeviceInfoA
GetRawInputDeviceList
EnumDisplayDevicesA
CreateDialogParamW
MoveWindow
MessageBoxA
PostMessageW
IsDialogMessageW
DispatchMessageW
TranslateMessage
PeekMessageW
SetFocus
GetActiveWindow
GetKeyState
SetCapture
ReleaseCapture
DefWindowProcW
GetWindowRect
GetClientRect
SetCursor
SendMessageW
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadImageW
AdjustWindowRectEx
GetSystemMetrics
SetWindowPos
SetForegroundWindow
BringWindowToTop
ShowWindow
DestroyWindow
ReleaseDC
GetDC
MessageBoxW
wsprintfW
EnumDisplaySettingsW
ChangeDisplaySettingsW
GetCursorPos
SetCursorPos
SetWindowLongW
UpdateWindow
EnumDisplaySettingsExW
SetWindowTextA
IsClipboardFormatAvailable
CloseClipboard
GetClipboardData
OpenClipboard
SetClipboardData
EmptyClipboard
GetFocus
SetWindowTextW
ClientToScreen
GetForegroundWindow
gdi32
GetDeviceCaps
SelectObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
shell32
SHGetFolderPathW
ShellExecuteW
ole32
CoUninitialize
CoCreateInstance
CoInitialize
oleaut32
SysAllocString
SysFreeString
VariantClear
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Sections
.text Size: 28.8MB - Virtual size: 28.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 345.0MB - Virtual size: 347.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mydata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ