Static task
static1
Behavioral task
behavioral1
Sample
01510458a11ec720f01e35531b9beac2802d381e9e2559e9727406d8e2354b26.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
01510458a11ec720f01e35531b9beac2802d381e9e2559e9727406d8e2354b26.exe
Resource
win10v2004-20220812-en
General
-
Target
01510458a11ec720f01e35531b9beac2802d381e9e2559e9727406d8e2354b26
-
Size
2.5MB
-
MD5
e11a842874e1b641fff6f896560321c4
-
SHA1
7dcfd6cf87ed609fe0806156e859460d9c17d89e
-
SHA256
01510458a11ec720f01e35531b9beac2802d381e9e2559e9727406d8e2354b26
-
SHA512
726fbc7b59c01ff07b91fd08aaf89b6203334590215b3a05b33077ca8bdd4c86449a3f2e52ca64d69d48c796fb154ca1096ad9887e473c733525c3007fb33e43
-
SSDEEP
49152:zl0M9yDUy5hT8ILfjmcIeRB6GYlQty3fYGq6KRBWA:zl0JYILrZtoGaQty3fYGxKfD
Malware Config
Signatures
Files
-
01510458a11ec720f01e35531b9beac2802d381e9e2559e9727406d8e2354b26.exe windows x86
0e206a73f478e2c22d5b4d7305770613
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
GetErrorInfo
advapi32
RegCreateKeyExA
user32
EnableMenuItem
kernel32
GetVersion
GetVersionExA
GetCommandLineA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
gdi32
DeleteDC
version
VerQueryValueA
ole32
CoTaskMemFree
comctl32
ImageList_BeginDrag
shell32
ShellExecuteA
comdlg32
GetOpenFileNameA
Sections
.text Size: - Virtual size: 670KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 23KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 52B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 1017KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ