3��Q�6�χ�:��H�I��Cu=�'X��@�GXY^/�ESLʌ����x��w�[�v�V�vz�������`�8S��WK=O�����ya�@��ji�I4��e��`��J��)�`�$��&�� �V�Pōb<gJ2�C�p�*w0 ^0*�n�?Y������7�z�=�r��e�l�`|Ҽ{Ar��*��m'<��gKZ�T�댑�@�B�јfQL��v�,�o��.���rpa� sp���������<C}����xN�'7Y/���, �D���6���eB�+wH�M'���#�^����f��1�k�v�t����Ė*�)�u �`W1��IJ{�����b���A�-����W;��V�A������)`������M���)$U/55η3����a(뫦`J���[`����I����Vر����U��C�\ɳ���툳���<j����Ss��K�SO�G=� �K��7�rE:�Η'�-��4{��@͌à�]fk�-�WX<��Il_\Y� ���y:P(�=u�d�O�Fdn n��b�����:���LJi��� �9�g�����@S�Z���=Ʌ0��Ƌڶ����J���7�,ة�Q��YQ��7�����A��z`��R�-�����9�Rs����t]���B�*jՠ}w�G�E+�Dv��0��mq�j$�BdOQ*C��1�U�W;��@�*�A_�JȽ~�GS����a����'#�b!�N�B��P&%�_2��/֛~�"ch��n�Ɂ°A7�i�[�].�Qu��^�LBX�^��,�W|+�Gj�hf:.P=4OixB��7k�N>������mF�.�H����@��`�$d����k�J4R��v�`\se*��TV���4Ԋ du(�(��t�=B����c�ʉ��^��gԷ�1��.����V��լc����7|����➤�<���� �S��~m"��Nx3���-/G9�G��%7��S�����m�@,����L*���=���fD�#4�����\�:)��Ӣ0���_>���1�*`�����?�[lM�J�Xn�Ʀ��^F'�O��2�e��>g���x�U�g�Dˊ%�@ !"}(3�-dh,�������B�.�C�G��*r�o��@6��>.'\^[l����q��!5U�������� ������N<E"u,��zf�nVW{;j�詢Zk��wJ���1!��&hy����ژt]��r?\��S��kq�������\��xB�c �@$3���j\W�3f�l�����x=`W'���C�w\�qA��I� �f���w��|��=����I�.aTf�>5Z�h���잽�g�Kؿ����d���@����1��o���'���������PeJ���[�/s?��Ƣ �-)� �ݫ$p�o� �oƷ��G�F|w{�d�^5&�[b� ��vO�K���b���z�=�y�j���$Y/��s���T����1}qˊE�<"5�\�J�p�1��S��DIkZ�7�2M�z�ka3�wp��3��@���?�K�*�0�ب���%������d^zhh�F6,b��l�k�g9��S����W{���\G[���I,��rc^����)���eB��;̖5��DX�꩕�[gq+��X�D9���h��MIhW��@�LS<R����l�H��w���d,8��]�]�)���%�l��ۚ3�a!�8dK"[T!�K��+|#6+QR���2x=�2���K����m�Зj�*'�Z[z��P+.�1��tNpBnV�,�X G��(�D{K�z������$�|1�0����ji�)ޘuD�N��2w�n�BH �LL�;� ~�\@@'��222������/���b���=B�.�{c��ۏ/��@�VL�L�9�����=َD��,������L7p81��9�� ���]t�C��w�T�HW��8b�u�mq�v���K�͂�,��$6�G�{M�c1\ژ�]�g��qMЗU����~�Ղ�M�q��m�T�rId>������6�h���{ћ�7�p��e5���F�xh¯��M��);�����bd}]sG���?n���� ��^�?%����H��Ȼ���ɧ��bEq�Ľ���CZ��>C��<���ۃ�5/qI�0�X��~�s�a���n%�~P��n�bD1n����6BNj�X�"ˈp6P��\D�PMeY^xN�6R��"jD�z�k�x��ٮ�e�z���Ռ',\�� ��C����F�r`��ň��i�=f{���@DQIe ��i���L7�)��"QQ�7/�{���*�j��=�����J��,�4����}��Bgq^_��5�eRK���f�����Vy�1b����/��TH<<��uB�ē��!>�*�kc�x[��hm�be֛fp��GzQN:}�A��qX����-X����RNf��_O���){�Ug��ذfݭ�l�ܔK6;��?�(4���5ؽ8v�1-�D�� ��G�B3���;��?ֿK��u���ҡ$��A]ZL���z뒍���4 � �X�(�+b��}�걬b�tϗ��N���2������>]D5��IL�������_�� ���՝�py����-2G�Ǐ��\;��.1�y�}�+�8�u����)������8�R��thK��S5r���a[�1�W�v�3�txұ5�v��� �x\,�NcV �y0IJ�j̴��_I��N9�O! $����V=��+ ��JP_l���I��!pq}�p1ČӀ�����b?���'� ����F�aJ������y�S�DF�<\�0at~�z)&p��^�B�p��2�2uO��w��FKX�����-HK��� �Q"�|�>{��:�MEAH7�Ң�����C��Rԕ����s��5��Q�>B璴�S��C���/�Z�`$��̖���}l�S(1:,+�]�!���"�#�~�*&h!5�*��[*���Z�o�S1��U��2��{K�ŧCZ�-c��-��=h���k��|?��>��2��v����8�U�"qG��[���$쾋!�O��q{�L�-�̮�ܵj����:�F3�ѩLY�ȸ��B}�At���5���͐���Їi,)�����n��k�z��Af�,����qix╚��B�״]�/��b���Ů/d���aUy��`��@��Q�����9�6fB��F�ڷo4U��
Static task
static1
Behavioral task
behavioral1
Sample
FC_24_Free_Trainer_by_pXilok.zip
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
FC_24_Free_Trainer_by_pXilok.zip
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
FC 24 Free Trainer by pXilok/FC 24 Free Trainer by pXilok.exe
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
FC 24 Free Trainer by pXilok/FC 24 Free Trainer by pXilok.exe
Resource
win10v2004-20240508-en
General
-
Target
FC_24_Free_Trainer_by_pXilok.zip
-
Size
8.2MB
-
MD5
b680de73cd743871781ac584a19d07dd
-
SHA1
74a78f257b5595472b8eb9d3fa6ae13f3f77f6a8
-
SHA256
15a1fb4a1160a08194cf4a84b93725a025155b33c8408c3322248a9c29962088
-
SHA512
a289e3cf7435788da8527d6d7c7aaa7e160cbeaae85e3557eb451ce12f5dfb1dac7a59ae10d573e17cd61f398a7725a0dae0a3a6786538797b24594ada9d15b9
-
SSDEEP
196608:JUzuaFwzgMnHzMIOe/dwfgbKFKQAI7163t+5M8V1MXnsweQ1tsZ:6uaFInHlAgWcJIJ63t+uOdZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FC 24 Free Trainer by pXilok/FC 24 Free Trainer by pXilok.exe
Files
-
FC_24_Free_Trainer_by_pXilok.zip.zip
Password: pxilok
-
FC 24 Free Trainer by pXilok/FC 24 Free Trainer by pXilok.exe.exe windows:6 windows x64 arch:x64
Password: pxilok
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 391KB - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 80KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4.8MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 318KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 308KB - Virtual size: 11.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE