Static task
static1
Behavioral task
behavioral1
Sample
usfive_20220301-230855.exe
Resource
win7-en-20211208
General
-
Target
usfive_20220301-230855
-
Size
461KB
-
MD5
7f0259626dc06311b6dff264978ac2c0
-
SHA1
09ee3e37075eb87f9406d9be69dc2d4d8610dd29
-
SHA256
9c25c7b26ee6764472f3d7a810d21474f3ebcca013f0a888f20689434c84a616
-
SHA512
09cf30c82abafe0dc266bab09c077a5c694a1dfff14568eb393da1ead0a784b8eb48f6486afe2d8aee5c69e636571d0f3cbda32d3ddba94f2de1b450a8cae8cc
Malware Config
Signatures
Files
-
usfive_20220301-230855.exe windows x86
e0099c0ba3b564d2d3b0381e49f6db7c
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetComputerNameExW
WriteProfileSectionW
GetNumaHighestNodeNumber
FindFirstVolumeW
SetConsoleCursorInfo
HeapLock
FindFirstChangeNotificationA
WaitForMultipleObjects
GetNamedPipeHandleStateW
FileTimeToDosDateTime
EnumResourceTypesW
EnumResourceNamesW
ExitProcess
TerminateThread
ReleaseActCtx
GetVersionExW
VerifyVersionInfoA
GetConsoleOutputCP
SetEvent
FindNextFileW
GetConsoleAliasesLengthA
GetCompressedFileSizeW
CopyFileExA
BuildCommDCBAndTimeoutsW
ReadConsoleOutputCharacterW
SetDefaultCommConfigA
VerLanguageNameA
_hread
GetCommConfig
WritePrivateProfileStructW
FreeEnvironmentStringsW
CreateTimerQueue
FindVolumeClose
ResetWriteWatch
WriteConsoleInputA
CancelWaitableTimer
SetComputerNameExA
FindAtomA
ReleaseMutex
LocalUnlock
CallNamedPipeW
VirtualProtect
GlobalAlloc
TlsGetValue
GetCommandLineW
InterlockedIncrement
CopyFileW
AddRefActCtx
OutputDebugStringW
FormatMessageW
GetPriorityClass
WritePrivateProfileStringA
GetUserDefaultLCID
GlobalWire
GetVersionExA
HeapValidate
GetWindowsDirectoryA
GetStartupInfoW
ConnectNamedPipe
GetCPInfoExA
GetSystemWindowsDirectoryA
GetSystemWow64DirectoryA
GetLastError
GetCalendarInfoA
DebugBreak
SetLastError
OpenFileMappingA
ContinueDebugEvent
GlobalFix
GetOEMCP
GetConsoleAliasA
GetPrivateProfileIntW
ReadConsoleInputW
InterlockedDecrement
DefineDosDeviceW
SetVolumeMountPointW
SetThreadAffinityMask
SetConsoleActiveScreenBuffer
GetExitCodeProcess
EnumResourceNamesA
GetCPInfoExW
GetThreadContext
lstrlenA
GetLongPathNameW
LoadLibraryW
ReadConsoleW
WriteConsoleA
GetComputerNameW
InterlockedFlushSList
DeleteCriticalSection
GetDriveTypeA
GetFileAttributesExA
GetVolumePathNameW
GetConsoleMode
GetComputerNameA
ProcessIdToSessionId
ReadProcessMemory
MoveFileExW
DisableThreadLibraryCalls
CreateIoCompletionPort
FormatMessageA
InterlockedExchangeAdd
WaitNamedPipeA
LoadModule
GetPrivateProfileStructA
GlobalReAlloc
GetSystemTimeAsFileTime
GetLocalTime
EnumCalendarInfoExW
OpenSemaphoreA
GetMailslotInfo
GetCommMask
lstrcpyA
VerLanguageNameW
LockFile
EndUpdateResourceW
CreateConsoleScreenBuffer
GetConsoleAliasW
GetWindowsDirectoryW
GetProfileStringA
GetQueuedCompletionStatus
AllocConsole
GetNumaProcessorNode
CreateMailslotW
SetCommState
CheckRemoteDebuggerPresent
GetSystemTimeAdjustment
_lread
GetConsoleAliasExesLengthW
GetWriteWatch
GetPrivateProfileStringA
GetModuleHandleA
HeapWalk
WriteConsoleInputW
LocalFileTimeToFileTime
GetFileInformationByHandle
GetProfileStringW
MoveFileW
CreateActCtxW
GetUserDefaultLangID
LocalLock
SetCommMask
GetDevicePowerState
SetFileApisToANSI
OpenWaitableTimerA
SetProcessShutdownParameters
PeekNamedPipe
FillConsoleOutputCharacterA
FindNextVolumeMountPointA
SetThreadPriority
DeleteAtom
AddAtomA
WriteConsoleOutputCharacterW
QueryDosDeviceA
InitializeCriticalSection
GetConsoleAliasExesA
GetBinaryTypeA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MoveFileA
RaiseException
GetCommandLineA
GetStartupInfoA
IsBadReadPtr
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetModuleHandleW
Sleep
GetProcAddress
GetModuleFileNameA
WriteFile
GetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsSetValue
TlsFree
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
SetStdHandle
CreateFileA
CloseHandle
FlushFileBuffers
user32
CharToOemBuffW
Sections
.text Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 177KB - Virtual size: 39.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ