fnac1-cn-v2[.]2[.]1[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
fnac1-cn-v2.2.1.exe
Size 248.8MB
Sample261102-a1aczazsat
SHA256 a049263f7decac2beee5a7a510c88a5b1c59055f0f877f6a2d1b22ce7675da8c
MD5 b9f2a4a417e91ba80ef575d1d9df95f3
SHA1 86bae90c0f588eebf4fcb32584e06671a024fa69
SHA512 26dea029120af085f0f032b09703ae81d8ab2628c35f2bc0a56ae4a1c48bb5216c6e2ad7f96874a335901c2cbc3ee6353e77d1c1562281fd89fcc5a3a145eece
SSDEEP 6291456:/GaLwR9E0KBFTeRLCpLHxwKvHMQv90cH177g71L3grGWTbbKAFr42+L5D:/GahBFTxpLHxRH0qfc3gZbbKAFr42i5D
TLSH
T1D4C802199FADC59FE2913C7D04F2B02F51AECD441EAB961A9A163A9C6DF5F881CC03D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fnac1-cn-v2.2.1.exe

File Explorer

fnac1-cn-v2.2.1.exe

.exe 248.8MB

fnac1-cn-v2.2.1.exe

IMPHASH cdf2338385bbf26ec9ce2289fc7f2d64
SHA256 a049263f7decac2beee5a7a510c88a5b1c59055f0f877f6a2d1b22ce7675da8c
MD5 b9f2a4a417e91ba80ef575d1d9df95f3
SHA1 86bae90c0f588eebf4fcb32584e06671a024fa69
SHA512 26dea029120af085f0f032b09703ae81d8ab2628c35f2bc0a56ae4a1c48bb5216c6e2ad7f96874a335901c2cbc3ee6353e77d1c1562281fd89fcc5a3a145eece
SSDEEP 6291456:/GaLwR9E0KBFTeRLCpLHxwKvHMQv90cH177g71L3grGWTbbKAFr42+L5D:/GahBFTxpLHxRH0qfc3gZbbKAFr42i5D
TLSH
T1D4C802199FADC59FE2913C7D04F2B02F51AECD441EAB961A9A163A9C6DF5F881CC03D0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

489257

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

winmm

timeBeginPeriod joyGetDevCapsW joyGetPosEx timeEndPeriod

kernel32

GetTempFileNameW GlobalAddAtomW GlobalDeleteAtom GetModuleHandleW lstrlenW GetLocaleInfoA LockResource VirtualProtect VirtualQuery SetLastError LoadResource SizeofResource FindResourceA FindResourceW IsBadReadPtr IsBadWritePtr FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA FindNextFileA FindFirstFileExA GetProcessHeap DecodePointer GetFileType LCMapStringW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetOEMCP IsValidCodePage GetStringTypeW GetCPInfo HeapFree GlobalFree HeapAlloc GetStdHandle GetModuleFileNameA GetModuleHandleExW ExitProcess HeapSize HeapCompact SetEnvironmentVariableW DeleteFileW GetACP LoadLibraryExW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer RtlUnwind InitializeSListHead GetCurrentProcessId GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount QueryPerformanceFrequency QueryPerformanceCounter LoadLibraryExA GetSystemInfo RaiseException FileTimeToSystemTime FileTimeToLocalFileTime GetSystemTime GetVersion GetTempPathW FindClose FindNextFileW FindFirstFileW GetCurrentDirectoryW SetErrorMode GlobalUnlock GlobalLock GlobalAlloc GetExitCodeProcess GetCommandLineW WideCharToMultiByte Sleep SetCurrentDirectoryW CreateDirectoryW CloseHandle SetFilePointer WriteFile GetLastError ReadFile CreateFileW GetCurrentThreadId RemoveDirectoryW GetVersionExW GetModuleFileNameW WriteConsoleW GetLocaleInfoW MultiByteToWideChar FreeLibrary GetProcAddress LoadLibraryW SetStdHandle GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers HeapReAlloc

user32

SystemParametersInfoW DrawEdge DrawTextW PostQuitMessage IntersectRect SetRect DrawFocusRect InvertRect CreateDialogParamA CreateDialogParamW CreateDialogIndirectParamA CreateDialogIndirectParamW DialogBoxParamA DialogBoxIndirectParamA DialogBoxIndirectParamW LoadMenuA LoadMenuW LoadStringA SetLastErrorEx GetTabbedTextExtentW GetUpdateRect IsIconic DefMDIChildProcW SetDlgItemTextW EndPaint BeginPaint PtInRect GetDlgItem MapVirtualKeyW ModifyMenuW GetDlgItemTextW EndDialog DrawMenuBar DestroyMenu LoadMenuIndirectW GetMenuItemCount SetWindowPlacement GetWindowPlacement GetFocus CallWindowProcW RemovePropW SetPropW GetPropW UnionRect DestroyWindow SetScrollPos SetScrollRange CreateWindowExW GetParent EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetFocus GetSysColor GetDesktopWindow RedrawWindow GetSystemMenu UpdateWindow SetWindowLongW MessageBoxW GetMenuStringW GetMenuItemID GetInputState FillRect LoadStringW DialogBoxParamW RegisterClassW RegisterClassExW LoadImageW LoadIconW GetWindow GetClassNameW GetTopWindow GetMonitorInfoW MonitorFromWindow GetSystemMetrics OemToCharA GetAsyncKeyState GetActiveWindow ShowCursor SetCapture ReleaseCapture GetKeyState GetWindowRect MapWindowPoints SetWindowPos IsZoomed GetWindowLongW AdjustWindowRectEx SendMessageW LockWindowUpdate IsWindowVisible GetClientRect SetWindowTextW IsDialogMessageW SetTimer GetClipboardData CloseClipboard SetClipboardData EmptyClipboard OpenClipboard IsClipboardFormatAvailable wsprintfW ShowWindow PostMessageW CheckMenuItem EnableMenuItem GetMenu InvalidateRect SetCursorPos ClientToScreen ScreenToClient GetCursorPos GetKeyboardState CopyRect UnhookWindowsHookEx KillTimer SetWindowsHookExW CallNextHookEx DestroyIcon GetSubMenu DeleteMenu GetMenuState LoadCursorW SetCursor ReleaseDC CreateIconIndirect GetDC MsgWaitForMultipleObjects DispatchMessageW TranslateMessage TranslateMDISysAccel GetMessageW PeekMessageW SendDlgItemMessageW

gdi32

CreatePalette GetDeviceCaps SelectPalette RealizePalette GetObjectW CreateFontIndirectW CreatePen Rectangle SelectObject MoveToEx LineTo CreateSolidBrush GetStockObject SetTextColor SetBkMode DeleteObject GetClipRgn ExcludeClipRect SelectClipRgn GetTextExtentPointW GetCharWidthW DPtoLP SetTextAlign SetROP2 LPtoDP SetBkColor Polygon TextOutW SetPolyFillMode GetTextMetricsW GetNearestPaletteIndex CreateHatchBrush SetDIBits CreateCompatibleBitmap CreateRectRgn CreateBitmap

comdlg32

GetSaveFileNameW GetOpenFileNameW

shell32

ShellExecuteExW DragAcceptFiles DragQueryFileW