C:\Program Files (x86)\Founder\OFDSeal\FZSealMgr.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1c62a3a25fa9fa9e1bc7cb673ece09d4a4c891d50e537589678684df77a9bf47.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
1c62a3a25fa9fa9e1bc7cb673ece09d4a4c891d50e537589678684df77a9bf47.exe
Resource
win10v2004-20240802-en
General
-
Target
1c62a3a25fa9fa9e1bc7cb673ece09d4a4c891d50e537589678684df77a9bf47
-
Size
464KB
-
MD5
b837c0b834b90ec51cdffca15e4f4908
-
SHA1
5cc9f8c2c268ed4227cfad3121352b2f29f05dd5
-
SHA256
1c62a3a25fa9fa9e1bc7cb673ece09d4a4c891d50e537589678684df77a9bf47
-
SHA512
3286ed752999bbe6c829b6be4efdd41cf9e71f69759a311a69295f4ba9d315f07dfcd80948ce0b255afa126a311934dee14987564886ec938cf155cbd37cbd78
-
SSDEEP
6144:MZX5oGNklWZ/bgJOja7WDKpC73/F/c9r+OI6jlAwJdK7QR2wbW7eE1SDaMJ:snNklWa4W62pCRUjqcoQUwbSe0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c62a3a25fa9fa9e1bc7cb673ece09d4a4c891d50e537589678684df77a9bf47
Files
-
1c62a3a25fa9fa9e1bc7cb673ece09d4a4c891d50e537589678684df77a9bf47.exe windows:5 windows x86 arch:x86
4cf8980eadd8de519011db1685e13e85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LocalFree
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
FormatMessageA
InterlockedIncrement
GlobalAddAtomA
GetCurrentProcessId
GetVersionExA
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
SetFilePointer
FlushFileBuffers
SetEndOfFile
LocalAlloc
CreateFileA
GetModuleHandleW
GetCPInfo
GetOEMCP
GetFileAttributesA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
CreateDirectoryA
RtlUnwind
Sleep
ExitProcess
RaiseException
HeapSize
VirtualAlloc
HeapCreate
VirtualFree
GetACP
IsValidCodePage
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
GetStartupInfoA
LCMapStringA
LCMapStringW
CreateFileW
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GlobalFlags
GlobalFree
GlobalUnlock
InterlockedDecrement
GetModuleFileNameW
WritePrivateProfileStringA
SetErrorMode
lstrlenA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
CompareStringA
FindResourceA
LoadResource
LockResource
SizeofResource
InterlockedExchange
GlobalLock
lstrcmpA
GlobalAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
GetModuleHandleExA
CloseHandle
GetLocalTime
SetLastError
GetStdHandle
ReadFile
WriteFile
SetHandleInformation
GetCurrentProcess
SystemTimeToFileTime
OutputDebugStringA
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleA
GetCommandLineA
advapi32
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegQueryValueA
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
shlwapi
PathFindFileNameA
PathFindExtensionA
ws2_32
accept
listen
getsockopt
send
closesocket
__WSAFDIsSet
socket
bind
recv
sendto
setsockopt
getpeername
ioctlsocket
connect
inet_ntoa
WSAStartup
recvfrom
ntohl
htonl
select
WSAGetLastError
htons
ntohs
getsockname
oleacc
LresultFromObject
CreateStdAccessibleObject
user32
ShowWindow
GetSysColorBrush
LoadCursorA
DestroyMenu
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
CreateWindowExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindowThreadProcessId
IsWindowEnabled
EnableWindow
MessageBoxA
GetMenuItemID
GetSubMenu
GetWindow
GetDlgCtrlID
GetWindowRect
GetWindowLongA
GetClassNameA
PtInRect
GetWindowTextA
SetWindowTextA
GetSysColor
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
UnhookWindowsHookEx
GetMenuItemCount
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
RegisterWindowMessageA
GetFocus
GetParent
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassInfoExA
SetPropA
PostQuitMessage
PostMessageA
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
SendMessageA
GetLastActivePopup
gdi32
GetDeviceCaps
GetStockObject
DeleteDC
SaveDC
RestoreDC
SetBkColor
SetTextColor
SetMapMode
GetClipBox
DeleteObject
PtVisible
RectVisible
ScaleViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
CreateBitmap
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
oleaut32
VariantInit
VariantChangeType
VariantClear
Sections
.text Size: 342KB - Virtual size: 342KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ