FXSUNATD.pdb
Static task
static1
Behavioral task
behavioral1
Sample
FXSUNATD.exe
Resource
win10v2004-20240802-en
General
-
Target
FXSUNATD.exe
-
Size
19KB
-
MD5
8133523a0cdfc78bc08439bb9fb9d879
-
SHA1
8e55728db0f7f96775b8d123484fc127704b9c43
-
SHA256
08c2389d5bfa75a597cc4fcb59104a1e179588ea51c62daaaeda4dddfa214777
-
SHA512
1d66f766b1a877f5e75545dcf8fc921d19d23d0a8a214a45536bc8a9b14c11a27a2229fe91e5fc0c2a1e35faf072be83a0ab7591fe196428204eb9e03899d37c
-
SSDEEP
384:Y41Bo0ueRKYAVKzaud/WKfj53NOCWdR0oKVTr5drZF1/j3zzOeIRof5kLZFhpunr:Y41BKeRKYeedlfdNloK/BZHj3zdIfLZ2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FXSUNATD.exe
Files
-
FXSUNATD.exe.exe windows:10 windows x64 arch:x64
Password: 231
125cd9b8071d173340ca4ff9c209a996
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
advapi32
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
TraceMessage
RegSetValueExW
RegOpenKeyExW
kernel32
GetProcessHeap
HeapAlloc
HeapFree
FreeLibrary
GetProcAddress
LoadLibraryW
GetVersionExW
SetLastError
TerminateProcess
GetCurrentProcess
RtlVirtualUnwind
OutputDebugStringW
RtlLookupFunctionEntry
HeapSetInformation
GetLastError
UnhandledExceptionFilter
Sleep
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
RtlCaptureContext
msvcrt
_fmode
_commode
?terminate@@YAXXZ
_initterm
memset
__C_specific_handler
__setusermatherr
_cexit
_exit
exit
__set_app_type
_XcptFilter
__wgetmainargs
_amsg_exit
_vsnwprintf
wcscmp
fxsapi
FaxSetPortExW
FaxSetExtensionDataW
FaxClose
FaxEnumPortsExW
FaxConnectFaxServerW
FaxFreeBuffer
winspool.drv
ClosePrinter
GetPrinterW
SetPrinterW
OpenPrinterW
EnumPrintersW
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ