Facebook[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Facebook.exe
Size

11.4MB
MD5

749f6b3a27f57180d67a24c9df9df106
SHA1

eeb6fd4f9081b50922088aeb9eada3c2cd8405d4
SHA256

ccbafe2060a10cf3b2e3f36de69a2219bf8c4e9147d1f955c08565be92cc0bbb
SHA512

18edc44e76e826064dfc75c15e236ccacbe1c3e257d905242d7710f017e7f61595cc1adecde8f44e7a141180375075990287da3029a94deba7bd158a78522440
SSDEEP

196608:YpW37VP9jTjaLqJ1XheBNtYFiWXWkybxzpmq2WnrWqkkb1qwJYVJgV2syZ:gWrx9zwuPMtiX2t1ZjlYVJC2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Facebook.exe

Files

Facebook.exe
.exe windows:6 windows x64 arch:x64

432b537c6c5bd3ddaffbf9d80d7a2532

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

ReadProcessMemory
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

UnregisterClassW

gdi32

CreateRoundRectRgn

advapi32

RegCloseKey

imm32

ImmSetCompositionWindow

d3dcompiler_47

D3DCompile

d3d11

D3D11CreateDeviceAndSwapChain

ws2_32

WSAGetLastError

ntdll

RtlAdjustPrivilege

Sections

.text
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_BSSg_la
Size: - Virtual size: 8B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 466KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 10.6MB - Virtual size: 10.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

432b537c6c5bd3ddaffbf9d80d7a2532

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

imm32

d3dcompiler_47

d3d11

ws2_32

ntdll

Sections

.text Size: - Virtual size: 1.5MB

_BSSg_la Size: - Virtual size: 8B

.rdata Size: - Virtual size: 466KB

.data Size: - Virtual size: 1.2MB

.pdata Size: - Virtual size: 60KB

.data1 Size: - Virtual size: 19KB

.trace Size: - Virtual size: 9KB

_RDATA Size: - Virtual size: 4KB

Size: - Virtual size: 5.7MB

Size: 3KB - Virtual size: 3KB

Size: 10.6MB - Virtual size: 10.6MB

.rsrc Size: 512B - Virtual size: 480B

.text
Size: - Virtual size: 1.5MB

_BSSg_la
Size: - Virtual size: 8B

.rdata
Size: - Virtual size: 466KB

.data
Size: - Virtual size: 1.2MB

.pdata
Size: - Virtual size: 60KB

.data1
Size: - Virtual size: 19KB

.trace
Size: - Virtual size: 9KB

_RDATA
Size: - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 480B