Static task
static1
Behavioral task
behavioral1
Sample
ab57c05617371ff632974f92d0b2527451869a15b1677967bab851ad20bb6b58.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ab57c05617371ff632974f92d0b2527451869a15b1677967bab851ad20bb6b58.exe
Resource
win10v2004-20230221-en
General
-
Target
ab57c05617371ff632974f92d0b2527451869a15b1677967bab851ad20bb6b58
-
Size
639KB
-
MD5
ec63008d0fc325951d4c5d69ed8bf498
-
SHA1
e31c2ca39ef280c64b11bd52ed284ec8fe090234
-
SHA256
ab57c05617371ff632974f92d0b2527451869a15b1677967bab851ad20bb6b58
-
SHA512
477dd430e19a12a001de0ba28b58c12f7e254630f41a27c1b090b07f671d6ee058c8adfb91931a6eef2970432580c68f93eca13f39b045a8eb0a3bb4968fdfd1
-
SSDEEP
12288:93hjHidxgGeN9wyqW+JgMplBaKSkxS5ylfNnLf8F9xo3LrNPFSnapMqbxDQ:njKxglCW+JgMpP+kxS5y3nATxodInGLD
Malware Config
Signatures
Files
-
ab57c05617371ff632974f92d0b2527451869a15b1677967bab851ad20bb6b58.exe windows x86
a0283cb4aef390a1b88cfe5888124ca6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
accountactivate
ord1
advapi32
AdjustTokenPrivileges
comctl32
ImageList_Create
comdlg32
PrintDlgA
gdi32
SetTextColor
iphlpapi
GetAdaptersInfo
itextout
xeDrawText
kpic10
KPIC_LoadPictureResource
normgrab
CleanupHookDll
ole32
CoTaskMemAlloc
oleaut32
SafeArrayGetElement
oledlg
ord8
olepro32
ord253
psapi
EnumProcessModules
shell32
ExtractIconA
statistics
Statistics_Online
tottsengine50
eTTSFirstVoice
user32
IsDialogMessageA
version
GetFileVersionInfoA
wininet
InternetGetLastResponseInfoA
winmm
PlaySoundA
winspool.drv
DocumentPropertiesA
wsock32
closesocket
xfile
CF_LoadFile
Sections
.text Size: 596KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE