Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Fragtor.256758.24469.31754.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Fragtor.256758.24469.31754.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Variant.Fragtor.256758.24469.31754.exe
-
Size
59KB
-
MD5
6942ff92ea99bac2afcd79a9ed8196a3
-
SHA1
4a200682e5c0000503fce404cdab63f82db46fe0
-
SHA256
d5b2b060ace40dc89f1a599f61974bb93713319e6f6ebbb8f35979ba8f3dd96c
-
SHA512
86455f907c0c27590dabd85ca836467d87dd2aae78b7409e1bbdd6e0e654dfbddf39e1f8369b1e14d7e498ec5593d5a544ddf42fa1c0cac4041511e07e781bde
-
SSDEEP
768:znZ7GlB/04i529iRLIsbe4IepMVvH0YsMfXnPY0KrcD1a6QEhpL57DYcrN:zZ7Gll99iR0Fe6IMPY0K4+Y57DYcx
Malware Config
Signatures
Files
-
SecuriteInfo.com.Variant.Fragtor.256758.24469.31754.exe.exe windows x86
1a9f1784044c2c2e1adbde9fd235f2df
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsURLW
PathStripPathW
SHRegEnumUSValueA
UrlCombineW
PathCanonicalizeW
SHQueryInfoKeyW
StrCmpNW
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
GetStringTypeW
CreateFileA
CreateFileMappingA
MapViewOfFile
VirtualAlloc
VirtualFree
UnmapViewOfFile
HeapReAlloc
CloseHandle
GetLastError
FormatMessageW
MultiByteToWideChar
lstrlenW
GetLocaleInfoW
FileTimeToSystemTime
GetDateFormatW
HeapAlloc
GetProcessHeap
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
HeapFree
SetLastError
HeapSize
FlushFileBuffers
GetLocaleInfoA
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
gdi32
CreateRectRgnIndirect
gdiPlaySpoolStream
GetLayout
SelectClipPath
SetROP2
StartPage
PolylineTo
EnumEnhMetaFile
mswsock
SetServiceW
GetAddressByNameW
s_perror
GetAcceptExSockaddrs
dn_expand
AcceptEx
crypt32
CryptFormatObject
CertGetPublicKeyLength
CertNameToStrW
CertGetNameStringW
CryptFindOIDInfo
CertFindRDNAttr
CertGetSubjectCertificateFromStore
CertFindAttribute
CertAddEncodedCertificateToSystemStoreW
oleaut32
VarR4FromUI1
VarI1FromDate
VariantCopyInd
VarI4FromDisp
SafeArrayAccessData
VarI4FromR4
VarI2FromDate
VarI4FromCy
VarI4FromI1
VarBstrFromBool
VarDecMul
ole32
HBITMAP_UserSize
OleCreateFromFile
OleRun
OleCreateFromFileEx
UpdateDCOMSettings
OleTranslateAccelerator
CreateOleAdviseHolder
user32
LoadStringW
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ