FeedingFrenzy[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

FeedingFrenzy.exe
Size

792KB
MD5

6e92c0767fc2a9daf8847376bce90a2e
SHA1

4838f52ed1f255ed73076791768757a28e104913
SHA256

36397fbbc8cf85a22c34faaa6e0ff9e376b61d6086c3e3968b11a2bc77c01c37
SHA512

43de7986f14dd61ce1e24a72e7fed4d00e6cd9e67c8d0fd8cfa88ffc914e57ca13b76e8faac8882a65f1e979fc9dfaee76a61b6eaf0b0d06ba348b2a5bf924f0
SSDEEP

24576:kdjy5NXPGZd0WH9Da8xeIjfV3QhmxYcaO+uJ6:gs9PvWH9bxLjVJaO+6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FeedingFrenzy.exe

Files

FeedingFrenzy.exe
.exe windows:4 windows x86 arch:x86

7e91e9e5bc8ffe4577aed26305e490ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\data\dev\sprout\Release\FeedingFrenzy\GH-Gold\FeedingFrenzy\Release\FeedingFrenzy.pdb

Imports

shell32

ShellExecuteA

kernel32

CompareStringA
CreateFileA
GetTimeZoneInformation
FindFirstFileA
CompareStringW
FileTimeToSystemTime
FindClose
FreeLibrary
Sleep
QueryPerformanceFrequency
OutputDebugStringA
CloseHandle
SetEnvironmentVariableA
SetEndOfFile
GetTickCount
GetLastError
SetCurrentDirectoryA
FormatMessageA
FileTimeToLocalFileTime
FlushFileBuffers
ReadFile
SetStdHandle
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
GetACP
GetSystemInfo
VirtualProtect
VirtualQuery
InterlockedExchange
LoadLibraryA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
GetNumberFormatA
GetLocaleInfoA
GetTimeFormatA
LockResource
SizeofResource
LoadResource
FindResourceA
RtlUnwind
RaiseException
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
GetProcAddress
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
MultiByteToWideChar
LCMapStringW
VirtualAlloc
IsBadWritePtr

user32

AdjustWindowRect
UpdateWindow
SetFocus
CreateWindowExA
RegisterClassA
LoadIconA
GetParent
DestroyWindow
OpenIcon
DialogBoxParamA
MessageBoxA
GetDlgItem
SendMessageA
EndDialog
LoadCursorA
SetCursor
GetWindowRect
GetSystemMetrics
ClipCursor
ShowCursor
GetCursorPos
ScreenToClient
ClientToScreen
SetCursorPos
PostQuitMessage
SetCapture
ReleaseCapture
DefWindowProcA
IsIconic
DispatchMessageA
PeekMessageA
TranslateMessage
GetMessageA
GetForegroundWindow
ReleaseDC
GetDC
MoveWindow
SetWindowLongA
CloseWindow
ShowWindow
SetMenu
GetWindowLongA
IsWindowVisible

advapi32

RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA

dsound

ord1

msacm32

acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
acmStreamClose

winmm

timeGetTime
mmioAscend
mmioRead
mmioDescend
mmioSeek
mmioSetInfo
mmioAdvance
mmioGetInfo
mmioClose
mmioOpenA

gdi32

BitBlt

Sections

.text
Size: 628KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e91e9e5bc8ffe4577aed26305e490ad

Headers

File Characteristics

PDB Paths

Imports

shell32

kernel32

user32

advapi32

dsound

msacm32

winmm

gdi32

Sections

.text Size: 628KB - Virtual size: 626KB

.rdata Size: 124KB - Virtual size: 120KB

.data Size: 12KB - Virtual size: 73KB

.rsrc Size: 24KB - Virtual size: 21KB

.text
Size: 628KB - Virtual size: 626KB

.rdata
Size: 124KB - Virtual size: 120KB

.data
Size: 12KB - Virtual size: 73KB

.rsrc
Size: 24KB - Virtual size: 21KB