0�I X5��p���è��X�&�_~�C�����y4cF�M�ޔe�\M�(�v-�q��R�����\� �������߸�BciA������X/v�����%�4p?����w���B����6����/���n��6���O� �ClmHn7n/O-���)��$eĞL*lp�,<)�3f"��-/��8��ʟ�)����6և{X;�_�=S�=��h��NW��>[�}�r2|���籜4YЍ�\l�7ҦF�>��EH0HO.P�`�ny�q\ԕ;�m2*/5��=d7����ԿSF1����)�%��-nlC��aȌ-�V �)�gd����s9C���b�2i)I ��,�HupX�ӡ��mh�������������Q�a��z����.�ɴ'�N�9ʔFe��f����>���qݹ�h"���)|Y�pZ�S���Ur���T�l� %=��M�;K?GD��]��#DdZ�a��_�;�`�L5��"���h�Z��٣���"I͂�0.�����X|A�3 �J�;z�.��~]�bZ�/C���H�w5E/ ŕ��Ƭ��_�<��Gk�ReRh�=n�E 2U�2LNǒ��qߝ#�܁\}���mT���#eپP�������ċ���:���s�:̝$�G��h�;c?���! UZ��^�TIB� d�f#^Y������5�e+p3�[D4��6��}K:|��;��d0Ȥ���Lc �"'+����=D�A��S��T�����O7�1�Y�w� �2��B��Շ�Z7�(���.����]v��W"�ٿN�� ?;�NS���O�7�<ٳ���@��)����#ʇ�/_H�ɐ�z�h }�0�� E�\��������{��7�x�(��܄���"�>��*���X�b~V�c`v��hQ�c���t-?�H����ډU�L+�n+`fQ\���[ :|��*nd��H�!"�[!s��0�� ~�6-9W��1�u�P�!a��I�)��@^�Q����=��l����6�^+�)f�]뻣�2������+���I�=,�"���b��8�o�������"��������,9�MA�uc��Όb�����m���=m��?�.�>G�.��.����P�%u�MZ�hPlh4��Eӛj�6-��vO-[�M ��zO���m�� ڬ. 0yG�q�^�L���O��4{�Pw��!���L�%.թCYk2��6'oxM�q�c_�w�+��8z�p{���^�>�&6�c�ެMY�l&�VN����V��+S�� m<~b�$q�䗳ͳ�/��b];�"���{��0����O�X��m���{�u���߿���&��{�9����4P�d��m��?��O�>Hj���%���ݢ��_y�� .�Kh�{�x�ٯ����iw(�z�T�����,��t�R�E�ijBk�ɵᐇ�=�:h�?�����Dd���(@����"�5������#�ht�A��9�l��Z���~%���ٱ���Ɲf�. i6�B��鴊Sp�h�<$����KЊ4S8�μZ���6Y�_��'��Ǩlת?3�C���iyP68���aJ�:-�]����~B�� y&Uc�&)�����O�u~��hM������ ���$��?��vXS��CWBr�(�w~G�R��~�)�_L�8�0w�p��c��/1�݃��T��X$&�Ӊ������16Dg�����Y �9����jT<q��ᣗJ ٤r�z:>�r����X<�)�^R5x��!����/"���\»�S�Wq��+v2����yޝ+� ��l�,\b�E��:D�LAcJm�PB(˥�Z ��=�:i�f�A�GK���e���&۩� +�F��r�5g%O�LY�����<L�ݵg��2�i|"l����>�L�k�$D�7§����r��;7/��zd�Z�/֥�*>bJN�(���Y~����\FG��w<��ܭ'���J�*��](7E �u�1���0+�:w�&�w�o�䑚�!�"ȅ���'x=�ӷ��~i^�@Pjӥp��@�ǝ������Ec�P���6��26�b��8�W#� ���Lel�iN�¾I9ߵv�*����jzvu��v�1��F@����P��J��d��6r��K�����r�/%J�TG�b�2�Lohx���<��c�w�m�4V����&<����vS|�uh�J� m�HPA�N�]4�rR���t��ä^�YbQ�4C��P�j;@�XwH��Q�D��r�������4�3x��< q���\qa�$��|-q%9�~�B�Vb9B�/-��g�� :<$�ĵx��lQ�o�KOgt+�<(�N���;����7Mi}�,_�W1e�#�M������`ь�c��I�P[w��t�rf��p�5��{ ��dx]'�XV��z&>��0ً����;������|����4�W-���kB�� �������~��ok�x��}���8x;[n����槺C Q�!t�:'�@g�H4����[[$��4d��eNX���f#?�i|�7�$�����n����������k�E����@i*[m�<ֱ^�v>hA���"@���@��(qZ�"��t؇h��*0�Êy�\����/��z���E�ǟ|#+�Ɍ�]�ɂ�@2W8ݠ逫��u) ��������E����.�2��A��U�qn�;o���w&��T<�ċ�~���ܘ����s���E��6��9[�����Ϳ{�ŏ�nLj��������kW���_7+O^��o�h���p�9�����(����.Y���w��S�0��ȧ` #ɗ�k�N����ˠ{��t��ĭ��Au��o��3+������?��B�l����!")�2�K�� ��d|a,����щ8�Y���������jo�T�ad`���gIh��=_qq�Y�B��dܗ�L��B�.�7���%�0������l��<ҡk�����c?�%�_�~ӽ�vĹ�6?���v|Bp�Z��ݭ��:�q��p��� �qju���'�)GX�e�qNG���[��C���ae�X#CH#S�����/E����`�8� x7��wH��hI�P��"=�.
Static task
static1
Behavioral task
behavioral1
Sample
FC 24 Lite Trainer.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
FC 24 Lite Trainer.exe
Resource
win10v2004-20240802-en
General
-
Target
FC 24 Lite Trainer.exe
-
Size
5.6MB
-
MD5
00e861c548561f4245f2d9737ca4d500
-
SHA1
2b3f2712fd12dcfa1100d7dcfaefb189446c2f74
-
SHA256
b4d5831c71e11f21a5a9c2d2a7c57be9d2fe375995e95b049dac1f3fdd0a6db4
-
SHA512
7c5e00f10ec8edc54364caa0187c385ee8d149b516a3f3805be4834779dc2c217a27265564b7fca03e941079996c350e77387d8f4247dbafd7973665f4d09786
-
SSDEEP
98304:Y2lKK1a0ida/cVkJIE8dy8CAm8l94O0XmzhrhfgW2+ZJf+GfOVu+4kly9z:YAK5JRVty8JcFmth/Jf+IO0G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FC 24 Lite Trainer.exe
Files
-
FC 24 Lite Trainer.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 386KB - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 79KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.3MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 505KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 299KB - Virtual size: 12.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE