Static task
static1
Behavioral task
behavioral1
Sample
hk4y5v.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
hk4y5v.exe
Resource
win10v2004-20240802-en
General
-
Target
hk4y5v.exe
-
Size
20.5MB
-
MD5
2ab69eb36f6470b9155eb241e48e9be5
-
SHA1
0b1914c5ab44f94ce33ff9d972bb99ac31054eea
-
SHA256
9b2c19bf873668d3718f38b70f187787321f5327c4249a7d81c551c40772727e
-
SHA512
74be91924fcc9436a9d14e236cc971427ac016ba2a3186f253a9ffb355f616aa11ccef2f57347f4f116324f49b7f21ffedeef2d7560a5d019a0319c25adfc7f6
-
SSDEEP
393216:qcOOMBONHde9vYySL8X3q30wezB8Ngudrk0uoYT2Sw+er5TnA0nX32fV2Z41x+aO:eHYNHmouoA2SSlM2mfV2e1x+n
Malware Config
Signatures
Files
-
hk4y5v.exe.exe windows:6 windows x64 arch:x64
16306d7cb99628a841eddd4d51ead093
Code Sign
29:e1:ab:6e:f5:d0:5c:6e:7a:2f:35:ac:4f:87:68:8d:d5:a7:f3:b1Certificate
IssuerCN=wyvern.cx,O=Myron Tymofijovych LP,L=Kyiv,ST=-,C=UA,1.2.840.113549.1.9.1=#0c11636f6e746163744077797665726e2e6378Not Before09/04/2024, 17:49Not After09/04/2025, 17:49SubjectCN=wyvern.cx,O=Myron Tymofijovych LP,L=Kyiv,ST=-,C=UA,1.2.840.113549.1.9.1=#0c11636f6e746163744077797665726e2e637805:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14/07/2023, 00:00Not After13/10/2034, 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2022, 00:00Not After09/11/2031, 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
a4:48:6d:f4:54:7c:62:b0:ae:af:8e:25:59:52:fc:f4:94:92:0c:14:1a:7c:2c:09:80:ce:ec:c4:8f:22:25:e9Signer
Actual PE Digesta4:48:6d:f4:54:7c:62:b0:ae:af:8e:25:59:52:fc:f4:94:92:0c:14:1a:7c:2c:09:80:ce:ec:c4:8f:22:25:e9Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
NIGGERNIGGERNIGGERN
Imports
ws2_32
recv
getsockopt
select
freeaddrinfo
getpeername
WSASend
send
WSAGetLastError
WSAStartup
WSARecv
getaddrinfo
setsockopt
getsockname
connect
ioctlsocket
closesocket
WSASocketW
WSACleanup
htons
WSASetLastError
WSADuplicateSocketW
htonl
shutdown
bind
WSAIoctl
listen
socket
WSARecvFrom
GetAddrInfoW
FreeAddrInfoW
ntohl
ntohs
WSASendTo
advapi32
RegSetValueExW
RegOpenKeyExW
RegDeleteTreeW
RegDeleteValueW
SystemFunction036
RegCloseKey
RegEnumKeyExW
RegQueryValueExW
GetUserNameW
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
RegCreateKeyExW
RegDeleteKeyW
OpenProcessToken
ole32
StringFromCLSID
OleUninitialize
CoTaskMemFree
CreateStreamOnHGlobal
OleInitialize
ReleaseStgMedium
CoCreateInstance
CoCreateGuid
DoDragDrop
RegisterDragDrop
RevokeDragDrop
oleaut32
GetErrorInfo
SysStringLen
SysFreeString
SafeArrayCreateVector
SafeArrayPutElement
SysAllocStringLen
SafeArrayDestroy
user32
ShowWindow
SetWindowTextW
GetMessageW
TranslateMessage
GetSystemMetrics
DispatchMessageW
PostMessageW
DestroyCursor
LoadIconW
GetScrollInfo
PeekMessageW
PostQuitMessage
CallMsgFilterW
IsRectEmpty
ScreenToClient
ClientToScreen
SetCursor
AdjustWindowRectEx
GetWindowTextW
IsWindowUnicode
KillTimer
SetCapture
GetCapture
GetKeyState
MsgWaitForMultipleObjects
EnumDisplayDevicesW
MonitorFromPoint
LoadCursorFromFileA
UpdateLayeredWindow
LoadCursorW
CallNextHookEx
SystemParametersInfoW
DestroyIcon
IsClipboardFormatAvailable
EmptyClipboard
EnumClipboardFormats
CountClipboardFormats
RegisterClipboardFormatW
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
UnhookWindowsHookEx
DrawIconEx
CreateIconIndirect
GetIconInfo
GetDC
ReleaseDC
RegisterHotKey
UnregisterHotKey
MessageBoxW
MapVirtualKeyW
GetAsyncKeyState
GetFocus
GetSysColor
SetWindowsHookExW
GetActiveWindow
SetFocus
IsZoomed
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
FlashWindowEx
IsChild
RegisterClassExW
GetMessageTime
RegisterWindowMessageW
GetMonitorInfoW
EnumDisplayMonitors
GetParent
GetDesktopWindow
SetWindowLongPtrW
GetWindowLongPtrW
GetWindow
SetScrollInfo
GetWindowLongW
WindowFromPoint
EnumThreadWindows
MapWindowPoints
SetClassLongW
GetClassLongW
GetCursorPos
GetDoubleClickTime
GetMenu
GetWindowThreadProcessId
SetMenu
MessageBeep
GetWindowRect
CreateMenu
NotifyWinEvent
GetMenuItemCount
InsertMenuW
GetClientRect
MonitorFromWindow
InvalidateRect
SendMessageW
RemoveMenu
SetWindowLongW
DefWindowProcW
RegisterClassW
CreateWindowExW
IsWindow
DestroyWindow
AnimateWindow
MoveWindow
SetWindowPos
GetWindowPlacement
IsWindowVisible
ReleaseCapture
GetKeyboardLayout
CreateCaret
DestroyCaret
SetCaretPos
SetTimer
EnableWindow
IsWindowEnabled
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WaitOnAddress
bcryptprimitives
ProcessPrng
kernel32
GlobalLock
OutputDebugStringW
FlsSetValue
FlsGetValue
FlsAlloc
GetCommandLineA
GetUserDefaultLCID
GetSystemDefaultLCID
GetCurrencyFormatW
GetNumberFormatW
GetConsoleOutputCP
SetStdHandle
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
InitializeCriticalSectionAndSpinCount
RtlUnwind
RtlUnwindEx
GetStringTypeW
CompareStringW
GetCurrentThreadId
GetComputerNameW
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetExitCodeThread
RaiseException
RtlPcToFileHeader
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
GlobalSize
IsValidLocale
FindClose
CloseHandle
Sleep
GlobalUnlock
AreFileApisANSI
HeapCreate
LockFile
GetFullPathNameA
UnlockFileEx
CreateMutexW
GetNativeSystemInfo
HeapValidate
HeapSize
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
DeleteFileA
HeapCompact
HeapDestroy
UnlockFile
LockFileEx
GetTickCount
OutputDebugStringA
SetDllDirectoryW
LoadLibraryW
ExpandEnvironmentStringsW
FindFirstFileW
GetLastError
FindNextFileW
GetCurrentProcessId
VirtualUnlock
VirtualLock
VirtualFreeEx
VirtualAllocEx
RtlCompareMemory
AddVectoredExceptionHandler
HeapFree
VirtualFree
VirtualProtect
VirtualAlloc
SetThreadPriority
GetStartupInfoW
GetCommandLineW
FlsFree
HeapReAlloc
GetFileInformationByHandleEx
CreateFileA
DeviceIoControl
SetComputerNameExA
SetFileAttributesW
TlsFree
TlsSetValue
DebugBreak
FormatMessageA
SetErrorMode
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
GetFileSize
SetEndOfFile
SetFilePointer
CreateFileMappingW
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
TlsGetValue
FormatMessageW
LocalFree
ReadDirectoryChangesW
GetShortPathNameW
GetLongPathNameW
TlsAlloc
ResumeThread
CreateSymbolicLinkW
CreateHardLinkW
MoveFileExW
CopyFileW
GetCPInfo
CreateSemaphoreW
GlobalAlloc
GlobalFree
LocalAlloc
LocalSize
EnumSystemLocalesW
SetFileTime
RemoveDirectoryW
GetFileSizeEx
GetDiskFreeSpaceW
CreateDirectoryW
LCMapStringW
ReleaseSemaphore
SetEvent
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
DeleteCriticalSection
TryEnterCriticalSection
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SetInformationJobObject
AssignProcessToJobObject
CreateJobObjectW
GetConsoleTitleW
VerifyVersionInfoW
GetVersionExW
GetSystemTimeAsFileTime
GetSystemInfo
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetTempPathW
SetEnvironmentVariableW
VerSetConditionMask
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
SystemTimeToFileTime
FileTimeToSystemTime
GetSystemTime
UnregisterWaitEx
TerminateProcess
WriteConsoleInputW
LoadLibraryExA
SetConsoleTextAttribute
SwitchToThread
DeleteFileW
GetProcessHeap
HeapAlloc
GetSystemTimePreciseAsFileTime
ExitProcess
CancelIo
ReadFile
GetOverlappedResult
CreateEventW
GetExitCodeProcess
WaitForMultipleObjects
CreateNamedPipeW
DeleteProcThreadAttributeList
GetFileAttributesW
CreateProcessW
UpdateProcThreadAttribute
InitializeProcThreadAttributeList
GetWindowsDirectoryW
GetSystemDirectoryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleInformation
GetModuleHandleW
SetFilePointerEx
DuplicateHandle
GetFullPathNameW
SetFileInformationByHandle
CreateFileW
GetFileInformationByHandle
SetConsoleCursorPosition
GetModuleFileNameW
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WideCharToMultiByte
ReleaseMutex
lstrlenW
CreateMutexA
GetCurrentProcess
WaitForSingleObjectEx
QueryPerformanceFrequency
QueryPerformanceCounter
SetWaitableTimer
CreateWaitableTimerExW
ReadFileEx
SleepEx
WriteFileEx
CreateThread
GetEnvironmentVariableW
GetCurrentThread
SetThreadStackGuarantee
CompareStringOrdinal
WriteConsoleW
MultiByteToWideChar
GetConsoleScreenBufferInfo
SetConsoleCursorInfo
GetStdHandle
GetConsoleMode
GetCurrentDirectoryW
SetLastError
GetModuleHandleA
FreeLibrary
OpenProcess
GetProcAddress
LoadLibraryA
GetConsoleCursorInfo
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
ReadConsoleW
ReadConsoleInputW
GetNumberOfConsoleInputEvents
SetConsoleMode
ResetEvent
WaitForSingleObject
QueryFullProcessImageNameW
GetSystemFirmwareTable
CreateNamedPipeA
SetThreadErrorMode
LoadLibraryExW
QueueUserWorkItem
CancelSynchronousIo
GetNamedPipeHandleStateW
WaitNamedPipeW
PeekNamedPipe
SetNamedPipeHandleState
ConnectNamedPipe
WriteFile
FlushFileBuffers
GetFileType
MulDiv
FindFirstFileExW
GetTempPathA
IsValidCodePage
GetACP
GetTempFileNameA
ReOpenFile
SetFileCompletionNotificationModes
SetConsoleCtrlHandler
UnregisterWait
RegisterWaitForSingleObject
CancelIoEx
GetOEMCP
shlwapi
AssocQueryStringW
PathIsRelativeW
ntdll
NtMapViewOfSection
NtCreateSection
RtlInitUnicodeString
RtlSetLastWin32Error
RtlDosPathNameToNtPathName_U
RtlImageNtHeader
LdrLoadDll
NtUnmapViewOfSection
LdrGetProcedureAddress
NtSetSecurityObject
NtDuplicateObject
NtClose
NtQuerySystemInformation
RtlUnicodeStringToAnsiString
NtWriteFile
RtlInitString
NtReadFile
NtCreateFile
RtlAllocateHeap
RtlFreeHeap
RtlFreeUnicodeString
NtOpenDirectoryObject
NtQueryDirectoryObject
NtUnloadDriver
NtLoadDriver
NtDeviceIoControlFile
NtWaitForSingleObject
RtlSubAuthoritySid
RtlInitializeSid
RtlLengthRequiredSid
RtlAddAccessAllowedAce
RtlCreateAcl
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlNtStatusToDosError
NtFlushBuffersFile
NtOpenProcessToken
NtAdjustPrivilegesToken
RtlFreeAnsiString
iphlpapi
GetAdaptersAddresses
dxgi
CreateDXGIFactory
bcrypt
BCryptGenRandom
shell32
SHGetPathFromIDListW
CommandLineToArgvW
SHBrowseForFolderW
SHGetSpecialFolderPathW
DragQueryFileW
SHCreateStdEnumFmtEtc
SHGetImageList
SHGetFileInfoW
Shell_NotifyIconW
ShellExecuteExW
userenv
GetUserProfileDirectoryW
gdi32
GetObjectW
CreateDCW
DeleteObject
SaveDC
DeleteDC
BitBlt
SetViewportOrgEx
RestoreDC
EndDoc
StartPage
EndPage
GetClipBox
GetDIBits
GetObjectA
GetFontUnicodeRanges
EnumFontFamiliesExW
CreateFontW
GetStockObject
SetLayout
CreateSolidBrush
StartDocW
StretchDIBits
CreateBitmap
SelectObject
GetDeviceCaps
CreateDIBSection
GetGlyphIndicesW
AddFontMemResourceEx
SetMapMode
CreateCompatibleDC
comdlg32
GetSaveFileNameW
CommDlgExtendedError
PrintDlgW
GetOpenFileNameW
winspool.drv
GetDefaultPrinterW
oleacc
LresultFromObject
AccessibleObjectFromWindow
comctl32
ImageList_DrawEx
ImageList_GetIconSize
ImageList_Destroy
gdiplus
GdipFillRectangle
GdipGraphicsClear
GdipDrawPath
GdipDrawPie
GdipDrawEllipse
GdipDrawRectangle
GdipFillRectanglesI
GdipDrawLine
GdipTransformPoints
GdipSetPageUnit
GdipGetWorldTransform
GdipTranslateWorldTransform
GdipMultiplyWorldTransform
GdipSetWorldTransform
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetPixelOffsetMode
GdipGetSmoothingMode
GdipSetSmoothingMode
GdipSetCompositingQuality
GdipDeleteGraphics
GdipCreateFromHWND
GdipCreateFromHDC
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipSetPenDashArray
GdipSetPenDashOffset
GdipSetPenDashStyle
GdipSetPenMiterLimit
GdipSetPenLineJoin
GdipSetPenEndCap
GdipSetPenStartCap
GdipDeletePen
GdipCreatePen2
GdipCreatePen1
GdipSetPathGradientTransform
GdipSetPathGradientWrapMode
GdipSetPathGradientPresetBlend
GdipSetPathGradientCenterPoint
GdipCreatePathGradientFromPath
GdipMultiplyLineTransform
GdipSetLineWrapMode
GdipSetLinePresetBlend
GdipCreateLineBrush
GdipGetSolidFillColor
GdipCreateSolidFill
GdipFillEllipse
GdipCreateTexture
GdipGetBrushType
GdipDeleteBrush
GdipCloneBrush
GdipGetMatrixElements
GdipShearMatrix
GdipRotateMatrix
GdipFillPie
GdipScaleMatrix
GdipTranslateMatrix
GdipDeleteMatrix
GdipCreateMatrix2
GdipCreateMatrix
GdipIsVisiblePathPoint
GdipGetPathWorldBounds
GdipAddPathRectangleI
GdipAddPathArcI
GdipAddPathLineI
GdipAddPathEllipse
GdipAddPathBezier
GdipAddPathArc
GdipAddPathLine
GdipClosePathFigure
GdipStartPathFigure
GdipSetPathFillMode
GdipResetPath
GdipDeletePath
GdipClonePath
GdipCreatePath
GdipFree
GdipAlloc
GdipFillPath
GdipDrawImageRectRect
GdipSetClipRect
GdipSetClipRectI
GdipSetClipPath
GdipGetClipBoundsI
GdipSaveGraphics
GdipRestoreGraphics
GdipBeginContainer2
GdipEndContainer
GdiplusStartup
GdiplusShutdown
GdipDeleteFontFamily
GdipGetEmHeight
GdipGetCellAscent
GdipGetLineSpacing
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipGetFamily
GdipGetFontSize
GdipCreateBitmapFromGraphics
GdipCreateHBITMAPFromBitmap
GdipDrawImageI
GdipDrawDriverString
GdipFillRectangleI
GdipDrawArc
wininet
InternetReadFile
HttpOpenRequestA
InternetCloseHandle
InternetOpenA
InternetQueryOptionW
HttpSendRequestA
HttpQueryInfoA
HttpQueryInfoW
InternetErrorDlg
InternetSetOptionW
InternetConnectA
imm32
ImmGetCompositionStringW
ImmAssociateContextEx
ImmGetContext
ImmIsIME
ImmSetCandidateWindow
ImmNotifyIME
ImmReleaseContext
usp10
ScriptBreak
ScriptShape
ScriptPlace
ScriptFreeCache
ScriptApplyDigitSubstitution
ScriptItemize
rpcrt4
UuidCreate
msdelta
DeltaFree
ApplyDeltaB
Sections
.text Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12.5MB - Virtual size: 12.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 333KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 257KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fptable Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ