Resubmissions
05-06-2023 08:11
230605-j3m7aaga4t 7Static task
static1
General
-
Target
Five NIghts At Freddys World (Halloween edition).exe
-
Size
18.2MB
-
MD5
f809483a3f4f5ff0777461b5cd5202e3
-
SHA1
b6605db9cad47189b91a080b9af3ba66290ddc13
-
SHA256
7936557f6516ac7f99ecd425973c8609a544208f0eff21bd3229ea8df0646c9f
-
SHA512
ae8830ebc18c3e645870d9af6c69e2e1eb2b7685e9d936428a768656fcc6cb88acd4d6877a3d6eb90f8c1b87c6ae93d1c7fad17c8fdc8a8c6514dd3d042d1c93
-
SSDEEP
393216:Uap6UOn+BdEpOJYuoB0c6ECRTEJD9HtqamJcCWoWNQhlMf1X9jHqOCmx1U4iHp:Uap6rnsQOuuouc6E1JBNqxwoW+hlQHqD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Five NIghts At Freddys World (Halloween edition).exe
Files
-
Five NIghts At Freddys World (Halloween edition).exe.exe windows x86
faac987cca0c4b64dfdd5177ceabbd32
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
Sleep
FindClose
CloseHandle
GetModuleFileNameW
CreateProcessW
GetCommandLineW
GetTempPathW
GetTempFileNameW
SetCurrentDirectoryW
CreateDirectoryW
RemoveDirectoryW
FindFirstFileW
FindNextFileW
CreateFileW
GetLastError
ReadFile
WriteFile
SetFilePointer
WideCharToMultiByte
MultiByteToWideChar
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
DeleteFileW
SetEnvironmentVariableW
GetCurrentDirectoryW
GetCommandLineA
HeapAlloc
EncodePointer
DecodePointer
RtlUnwind
HeapCompact
HeapReAlloc
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
InterlockedIncrement
InterlockedDecrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
LCMapStringW
WriteConsoleW
user32
LoadStringW
MessageBoxW
MsgWaitForMultipleObjects
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
wsprintfW
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ