Static task
static1
Behavioral task
behavioral1
Sample
SniperElite4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SniperElite4.exe
Resource
win10v2004-20220812-en
General
-
Target
SniperElite4.exe
-
Size
747KB
-
MD5
ec8006adfe602bf815b467163a59bf8c
-
SHA1
65e399931305a3f15d743a22378e3d62e2d6f840
-
SHA256
0413882a483933a7b43004878465e38eb114a7f7e086ddec7eb19987ddcc840f
-
SHA512
057eebed6d73e09ec2223fb2462c9deb671773f93fc9b43791c5beba7b05af096acfcc524aaa47a3c26bf12aae335d659508fefe4b5800a5f7524449bac1d59e
-
SSDEEP
12288:jdv7HwhinThmzYhAPbg031nA9myxF3BCmlqolB/KMzUYw5CCvlvQWM:VUincYhAPbX1/yvBlqEBnzUY/W
Malware Config
Signatures
Files
-
SniperElite4.exe.exe windows x86
fb0c2536fe1be4942c1518f27b8510bc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetGetConnectedState
kernel32
DeleteCriticalSection
CreateWaitableTimerW
QueryPerformanceFrequency
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
Sleep
CloseHandle
RaiseException
GetSystemInfo
GetLocalTime
GetModuleFileNameA
GetFileAttributesExA
FindNextFileA
FindClose
GetCurrentDirectoryA
UnmapViewOfFile
SetCurrentDirectoryA
CreateFileA
GetFileSize
CreateFileMappingW
MapViewOfFile
WriteFile
CreateDirectoryA
GetCurrentProcess
GetFullPathNameA
GetEnvironmentVariableW
CreateMutexW
FormatMessageW
GetLastError
LoadLibraryW
GetProcAddress
LocalFree
GetCurrentProcessId
GetModuleHandleW
FreeLibrary
IsDebuggerPresent
SetUnhandledExceptionFilter
InitializeCriticalSection
LockResource
GlobalAlloc
WritePrivateProfileStringA
LoadResource
FindResourceW
GetPrivateProfileIntA
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
LCMapStringW
GetFileType
GetStringTypeW
HeapAlloc
HeapFree
GetACP
GetStdHandle
WideCharToMultiByte
MultiByteToWideChar
ExitProcess
GetModuleHandleExW
RtlUnwind
SetLastError
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
SizeofResource
TlsAlloc
InitializeCriticalSectionAndSpinCount
InitializeSListHead
GetSystemTimeAsFileTime
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
GetStartupInfoW
CreateEventW
WaitForSingleObjectEx
DecodePointer
WriteConsoleW
GetPrivateProfileStringA
CreateFileW
SetStdHandle
VirtualProtect
VirtualQuery
LoadLibraryExA
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
SetEvent
ResetEvent
user32
GetFocus
EndDialog
GetDlgCtrlID
GetDlgItemTextW
SendDlgItemMessageW
IsDlgButtonChecked
GetDlgItem
CheckDlgButton
DialogBoxParamW
EnableWindow
GetMessageW
PostMessageW
GetWindowRect
FillRect
SetWindowTextW
ShowWindow
DispatchMessageW
SetTimer
SetDlgItemTextW
TranslateMessage
LoadIconW
LoadCursorW
KillTimer
PostQuitMessage
GetClassInfoExW
GetSystemMetrics
GetWindowLongW
DefWindowProcW
GetWindow
CreateWindowExW
SendMessageW
RegisterClassExW
SetFocus
GetClassNameW
SetCapture
SetWindowLongW
GetClientRect
GetParent
ReleaseCapture
InvalidateRect
MessageBoxW
SetWindowPos
gdi32
GetStockObject
shell32
ShellExecuteW
ShellExecuteExA
SHGetFolderPathA
ole32
OleCreate
CoTaskMemAlloc
StgCreateDocfile
CreateStreamOnHGlobal
OleInitialize
oleaut32
VariantInit
SysAllocString
comctl32
ord410
ord413
ord412
urlmon
CoInternetGetSession
Sections
.text Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 277B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 543KB - Virtual size: 542KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ