Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Fragtor.153599.22110.595.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Fragtor.153599.22110.595.exe
Resource
win10v2004-20220901-en
General
-
Target
SecuriteInfo.com.Variant.Fragtor.153599.22110.595.exe
-
Size
133KB
-
MD5
cf0bd55c4353f30e534425fd4250c7e8
-
SHA1
ade8e873bc005ae351537fe841c70372785cf380
-
SHA256
069ac199c17b82e79091fb7dc8109858fe3a5517131255b3a2e79adf950a4640
-
SHA512
b6444a71f318bd0f6a3cb3dc870c6fe089c4fc7407e17ac686d5d1429515bb9f32eef4d354873eb6592abd47ffdb1005672360137adc23ccaf668988beed5e1d
-
SSDEEP
3072:bCsPEvMCi32nCnQCHqFXXOf8Lm2JYMlBgT4ozyf:b9PkKu4qFXeym29Rf
Malware Config
Signatures
Files
-
SecuriteInfo.com.Variant.Fragtor.153599.22110.595.exe.exe windows x86
03c09395cddbb92237979b7f2bb159ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmGetGuideLineW
ImmLockIMC
ImmUnregisterWordW
ImmInstallIMEW
ImmGetIMCCLockCount
ImmSetOpenStatus
ImmGetCompositionFontA
ImmGetCandidateWindow
ImmSetCompositionFontW
ImmSetCompositionStringA
ImmGetStatusWindowPos
shlwapi
StrRChrIW
StrCmpNA
kernel32
DecodePointer
WriteConsoleW
AddAtomA
VirtualAllocEx
FindResourceW
DeviceIoControl
GlobalAlloc
CreateFileW
GetFileSize
ReadFile
GetTempPathW
VirtualAlloc
lstrcatW
EnumResourceTypesW
GetConsoleWindow
CloseHandle
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
GetProcessHeap
LCMapStringW
CompareStringW
GetStringTypeW
GetFileType
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapAlloc
HeapFree
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
ExitProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
RaiseException
ole32
HMENU_UserUnmarshal
ReadStringStream
OleConvertIStorageToOLESTREAMEx
HBRUSH_UserMarshal
SNB_UserMarshal
WriteStringStream
HPALETTE_UserUnmarshal
STGMEDIUM_UserUnmarshal
HGLOBAL_UserSize
HBRUSH_UserSize
HACCEL_UserFree
loadperf
UnloadPerfCounterTextStringsW
LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsW
rtutils
RouterLogEventDataA
TracePrintfW
TraceDeregisterExA
LogEventW
LogErrorA
TracePrintfExW
RouterGetErrorStringW
shell32
SHGetPathFromIDListW
DragQueryFileA
SHFileOperationW
SHFileOperationA
SHGetSpecialFolderLocation
msacm32
XRegThunkEntry
acmFilterEnumW
acmStreamConvert
acmFilterTagEnumW
acmFormatTagEnumA
acmFormatTagDetailsW
acmStreamMessage
acmFilterChooseA
user32
ShowWindow
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ