Static task
static1
Behavioral task
behavioral1
Sample
humohmwgr1upap44.exe
Resource
win10-20230220-en
General
-
Target
humohmwgr1upap44.exe
-
Size
14.4MB
-
MD5
a64ac54cbe6cd47e5a3068fbe5843432
-
SHA1
ebc263da8a0ac1b27e779256e7dc1463bc4502d7
-
SHA256
4532f9a3dc0be1f378680e7aeafd77704f97511f5f1dc03d63098178e4aed1fd
-
SHA512
a86edcbb48d3bcd1cdd6de71ef7408414389614e0f28c103315b87d28d42499e4b1fc78ebede9c246b37a6fe6d845c3f23dfd289db9aa4ee24ebac112cac1b7f
-
SSDEEP
393216:io+0vWGQjTmlo6WIXi0X94rpClNSeVWVqmWbG4WU:iR0vWGQjyl5WISsTlNSeVW8mkGg
Malware Config
Signatures
Files
-
humohmwgr1upap44.exe.exe windows x64
725801d32b24a73b3bd6efd07dc993ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ws2_32
socket
opengl32
glClearColor
kernel32
IsWow64Process
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ReleaseCapture
CharUpperBuffW
gdi32
GetDeviceCaps
advapi32
CryptReleaseContext
shell32
DragFinish
imm32
ImmReleaseContext
Sections
.num25 Size: - Virtual size: 798KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.num36 Size: - Virtual size: 302KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.num78 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.num6 Size: - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.num77 Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.num10 Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.num101 Size: - Virtual size: 9.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.num25 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.num99 Size: 14.2MB - Virtual size: 14.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.num86 Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.num16 Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ