Static task
static1
Behavioral task
behavioral1
Sample
WolfSP.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
WolfSP.exe
Resource
win10v2004-20220812-en
General
-
Target
WolfSP.exe
-
Size
1.4MB
-
MD5
c75cc5b986adeaa1a3d57f856d6fa19a
-
SHA1
a78edfd075705fb9e032d5aa9932c1cd982be327
-
SHA256
d191c91a3a2e2e13151b4366a66405726ee5eda017adf5e0670d734655b984f6
-
SHA512
4800218520f40c928d87c0e21523017e6e32e6622c7ecc7623ced587c234b0577709be08851569601f9c688a3e516c217db11f7a8edeeb51bdf89020cdf9ed85
-
SSDEEP
24576:fD/6LjH2lTgg5nNz6l7xe0m10RdxwozCK35aYQBnUZVIscnPRWqGW9XXdswfJfD2:jxlTg46lle0m10RdT4lUKPGW9XXdswfg
Malware Config
Signatures
Files
-
WolfSP.exe.exe windows x86
3ab40c381e1cddb9d3d9f209e1d2ae93
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiInOpen
joyGetNumDevs
joyGetPosEx
midiInStart
joyGetDevCapsA
midiInGetDevCapsA
midiInGetNumDevs
midiInClose
timeEndPeriod
timeGetTime
timeBeginPeriod
wsock32
bind
closesocket
sendto
recvfrom
ioctlsocket
gethostbyname
WSAGetLastError
htons
setsockopt
inet_ntoa
socket
recv
send
connect
ntohl
gethostname
WSACleanup
kernel32
CompareStringW
CompareStringA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
HeapSize
RaiseException
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GlobalMemoryStatus
CreateProcessA
GetCurrentDirectoryA
GetDriveTypeA
GlobalUnlock
GlobalSize
GlobalLock
FreeLibrary
GetProcAddress
LoadLibraryA
Sleep
GetVersionExA
SetErrorMode
MulDiv
GetEnvironmentStrings
FreeEnvironmentStringsA
SetCurrentDirectoryA
InitializeCriticalSectionAndSpinCount
SetStdHandle
SetConsoleCtrlHandler
FlushFileBuffers
ReadFile
CloseHandle
GetConsoleMode
GetConsoleCP
GetFileType
SetHandleCount
SetFilePointer
GetModuleFileNameA
GetStdHandle
WriteFile
GetTimeZoneInformation
SetEnvironmentVariableW
SetEnvironmentVariableA
HeapReAlloc
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
HeapCreate
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetCurrentThread
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetLocaleInfoW
SetEndOfFile
GetProcessHeap
InterlockedExchange
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetSystemDirectoryA
VirtualAlloc
FormatMessageA
GetLastError
VirtualFree
CreateThread
CreateEventA
WaitForSingleObject
SetEvent
ResetEvent
HeapFree
MultiByteToWideChar
GetSystemTimeAsFileTime
RtlUnwind
HeapAlloc
DeleteFileA
MoveFileA
GetModuleHandleW
ExitProcess
CreateDirectoryA
GetFullPathNameA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
user32
ShowCursor
MessageBoxA
ChangeDisplaySettingsA
ShowWindow
RegisterWindowMessageA
GetWindowLongA
UnregisterHotKey
RegisterHotKey
SystemParametersInfoA
LoadIconA
LoadCursorA
RegisterClassA
AdjustWindowRect
GetDesktopWindow
GetDC
ReleaseDC
SetWindowLongA
SetForegroundWindow
PostQuitMessage
DefWindowProcA
SetTimer
InvalidateRect
UpdateWindow
CreateWindowExA
SendMessageA
CloseWindow
DestroyWindow
GetWindowTextA
SetWindowTextA
CallWindowProcA
SetFocus
PeekMessageA
OpenClipboard
GetClipboardData
CloseClipboard
GetMessageA
TranslateMessage
DispatchMessageA
GetForegroundWindow
ClipCursor
GetCursorPos
ReleaseCapture
GetSystemMetrics
GetWindowRect
SetCursorPos
SetCapture
EnumDisplaySettingsA
gdi32
SetPixelFormat
DescribePixelFormat
SwapBuffers
GetDeviceGammaRamp
GetDeviceCaps
CreateFontA
CreateSolidBrush
SetBkColor
SetTextColor
SetDeviceGammaRamp
advapi32
GetUserNameA
shell32
ShellExecuteA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
Sections
.text Size: 972KB - Virtual size: 971KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 12.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 227KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ