Static task
static1
Behavioral task
behavioral1
Sample
FCBUϲƵv27.exe
Resource
win7-20240704-en
General
-
Target
c0eb80dffd198de2a3f5b1d322724993aea819a672e1471fa0b4b8f6989983d6
-
Size
4.4MB
-
MD5
ec3ecc2c69850caaa378f08dd5331bbe
-
SHA1
75ccb83132d120a9b5451d3c98dbf6428d424d92
-
SHA256
c0eb80dffd198de2a3f5b1d322724993aea819a672e1471fa0b4b8f6989983d6
-
SHA512
59b7b103b9a5a7588611850ae5ca92ff37c6c4e4b2bcfc772cf6cc874b75087c126c11643aac30366f09ac8cb32866ea83be1ac4a398453f90b30d662c9f76bf
-
SSDEEP
98304:uCM/+B0bEAM8De/H79TXbbBN5Nu0olT51WoFkrPZv+Br6UwFgbcAS1zv+EI:s/+Goz9XbLTu1zXkrxv+GFggAS0L
Malware Config
Signatures
Files
-
c0eb80dffd198de2a3f5b1d322724993aea819a672e1471fa0b4b8f6989983d6.zip
-
FCBUϲƵv27.exe.exe windows:4 windows x86 arch:x86
Code Sign
12:be:42:8b:cd:91:e6:46:bd:b4:4f:57:d3:35:09:66Certificate
IssuerCN=fcbu.com,O=www.fcbu.com,1.2.840.113549.1.9.1=#0c0d73756b6540666362752e636f6dNot Before27/06/2017, 03:02Not After31/12/2039, 23:59SubjectCN=fcbu.com,O=www.fcbu.com,1.2.840.113549.1.9.1=#0c0d73756b6540666362752e636f6d0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2022, 00:00Not After09/11/2031, 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14/07/2023, 00:00Not After13/10/2034, 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
e6:f0:a6:c3:fa:37:de:0b:a1:a2:bb:cf:91:1d:4c:37:6a:40:d2:30Signer
Actual PE Digeste6:f0:a6:c3:fa:37:de:0b:a1:a2:bb:cf:91:1d:4c:37:6a:40:d2:30Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
uU]��ᪿ����f�&oiZ-��C'qd���+�/Z���.E��AKu>B~���>|�e+��2kk�����?i� �N0�/���m�O����р@%�a^~�YH�qKA�<��f ��{+?�hЉ����ģê�s�f�`F�i�`�y=?E}V�L�@{��}��j8$�� ��H������"e���)����1_Xn�ͻ���X�|i���":M�D��op��#����t$�*8+�4�*��-�~�~��R�xg��$�E,�4(շX�O��k����aXs @d/��HA� �e��C�Ft��7��j�Sܐ���l!����(�������^�u��|��@0��}S���%=���!��H;���4� �9�L��RߛwD\��8��U����?�)wH|�u���8�q���aM_����hYcZű;vs.qC�d��g����St�FCY.g w<O������^5/���u�*�R�л6�>�F��G��C��娞�8�&��o�ÖC�(=����'�3Z�;�"Q�驦傭��/ŜA��D�[%`�|�^m%\���_�vx4j�������I���C�۷W�ݺ7������nvSRp�WGPJHra���,5nf �&��c �!�O#J���@|R*nmR� ���h�)x�f+}F�*ϋ G0�b�b{撸:"�`�c����E��1�k��X2��3s���yr ,n�%8�sk���A� �~�Q�mv1��Ԛ��~lB�zMDm��w��sb��S���@��p�:��Yt^�U�8�S2g�E���D9�����d0j{iD�jRѦ�툈.v Al�b d �oi� xf.��=����yCB��L"���ԅ��D���X���fYfM��l:��X�<Mo�`@":�;D:2��LX�E��L�"F?._;8Τ��-��m sڵ�f����G;����D����i{nh�+.��m�Q��hX�B��nj x�orhv�����w���E���D��H0�Bvǐ�>���U��f�e$�qMY�b2v�}�A5Z�`�p��T0�m ���o�h���� � ��sf�d®-��-�ﵑ�@Kf�M̄�Ƀ�JWi��,�L��2>�ƃ���?�.��ϛ'� �~��3)s����x�2����'�G #��L�����h?�d���됸��qt(�W�sWZ��ݕ��n�eㅐy8�EY�#)�[�������R�ײ|�n �W�u�E[i��ng�b,�D�ُe�8R�/z��]e�]I�¾J%a��v�VG���-'9j�/��a[_����~���zq�a��L�>{�V��&����BV�7�h��ڴ�]�LH�ŕ.H��R���ƻgˉ�fZhZ����$��]S!�j�k�NWB� �̬?�g�1��)�������٩���#O:�ˬ�-����V�qnV�����vۥN�0M�"cԪV�}���0�9�L a���d��ͩl<�����f~����5s�RND×����y�Q`_,?*�-=���HX�������PE���}턶�$�n�g|ߎ�J�h_���b����MH����F<��d�?������ӁJ����H�ȅ�_�v-��St��2�pj��`#vf;q�:%qh���������A9o��&�#���Kq$G�g�<���.ky>܅Zy)�~ꝤXѪq>s��+�\�� qxg=�kn��ʓwɕn»�C���pN�i��5vP�֨�-Z���?��K��Z�>3��p��~�3�~��Y�,�?99*��\�vsAM�qН����II��K]���A<�M�c���<�~��KU�)�����x26�"D�@�*]z�ZM�i�˺��R!�!4 �鶝�#���I�+��`�k]��V�r����I��rs�W�a7�*�ȗ��_��V���'�,� ��bN�"�H��GS���X���� ��m8�8����t4cN=�@�(�0�0ƽ��r+J7:3�~�(�_�+�C�N��scF����ϰ�����P)0�:_����D�b�9l����?ܑ�"�z�R��i����l�D�<<A��F� ��E�{}|�$� ��������j�� ���+`_K밲�nv^����ԫ�ܜ��ڎ8:��<nhQ� ���H�ć��Z���d<�8*��;�(���%�I^6�}�^ ���L��r)7y��{Q��u/�Oӧ��3�0Jv�=0��K����(�m�>Y�Jj�h:w���tv�'7J�L ��B��c��m�� ��P���־zL�FLR*�3�3 6�&-�q-�(7U&��8F�P?�6�/]%�@l"��<c��%S%�[��o����n�24\��2���{��Z�2�ʹ!���6G0�^/��3S�H���?dj���a̎o���#p��zx��@�=5_>'V�I��Bb�3����۪A�6(��C�9?]Go3?�m����,L, H������s��ҥ!��pQ��J�8���?�*K1��ޯ�x���f[����j)�^d,��i�`g1D��tP~W����ݟ�F@�CJd��LP�z� �Y�W��&:4B�ۢ�U)Ɠʙ�`����x�P;��y0�<s�]!s�I����QO�F��XU��|�:�p��l髞`r��`��-��tS�K?rL|���A��u\s�h7Uj��'x�w�C�*�f��O�c��s��8��>��.#�PF����B��,����1)��'����X��$��,NC�vz�� �_.�aYE~�24�h��7Ȳ�v]��Ҹï�fYi�U �)a�_��S�Tp��@iM�^)N_��/Z:@�߿:,���P|tY���&��(��$[,@��HM|�t�a��@|ݡb{�n"�q��4r�7�l\�/��!���%����ob�u�������� 9����`ZuG���'1&$���pX�����I��'`��q#ua�1u��=|����,O�[@J�4�x-���ǹ������ �Y��4d+k�L1��G�W�pw��������(8.,0�(�6�5ESGc����Cg�ؘ��Ǎ��������
Sections
Size: 528KB - Virtual size: 864KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 204KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
FCBUϲƵʹ˵.txt
-
ѹļʹã.txt