Overview
overview
10Static
static
VirusShare...4d.exe
windows7_x64
10VirusShare...4d.exe
windows10_x64
10VirusShare...4d.exe
windows10-2004_x64
10VirusShare...4d.exe
windows11_x64
VirusShare...4d.exe
macos_amd64
1VirusShare...4d.exe
linux_armhf
VirusShare...4d.exe
linux_mips
VirusShare...4d.exe
linux_mipsel
VirusShare...4d.exe
linux_amd64
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_41d87fa0c9244a9a098742155a862e4d.exe
Resource
win7-20220331-en
Behavioral task
behavioral2
Sample
VirusShare_41d87fa0c9244a9a098742155a862e4d.exe
Resource
win10-20220310-en
Behavioral task
behavioral3
Sample
VirusShare_41d87fa0c9244a9a098742155a862e4d.exe
Resource
win10v2004-20220331-en
Behavioral task
behavioral4
Sample
VirusShare_41d87fa0c9244a9a098742155a862e4d.exe
Resource
win11-20220223-en
Behavioral task
behavioral5
Sample
VirusShare_41d87fa0c9244a9a098742155a862e4d.exe
Resource
macos
Behavioral task
behavioral6
Sample
VirusShare_41d87fa0c9244a9a098742155a862e4d.exe
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral7
Sample
VirusShare_41d87fa0c9244a9a098742155a862e4d.exe
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral8
Sample
VirusShare_41d87fa0c9244a9a098742155a862e4d.exe
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral9
Sample
VirusShare_41d87fa0c9244a9a098742155a862e4d.exe
Resource
ubuntu1804-amd64-en-20211208
General
-
Target
VirusShare_41d87fa0c9244a9a098742155a862e4d
-
Size
382KB
-
MD5
41d87fa0c9244a9a098742155a862e4d
-
SHA1
f80f8a9584fd4ec0a3e86f0a4bedd66bf204bcdc
-
SHA256
60767e516dcf017b6a446f383a87afda3ce002292866195bdcffb5c8e9dac0c9
-
SHA512
bed43d92325b572f9a1dde0f6088569679619b50d55f120b67b3db0c5dd3c1db604702881b0f7180f1a66069a9f0e2177b7bbd70af8e88da530563163afbd359
-
SSDEEP
6144:A0Ly6qr9+br6u1yvZgQHhEaBTuPwyQ9Hmdy1MsS:AxF9FZhH+aBaPUGY1Mz
Malware Config
Signatures
Files
-
VirusShare_41d87fa0c9244a9a098742155a862e4d.exe windows x86
c8747dd68fb329483bc3153dd16c196c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetBinaryTypeA
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCompressedFileSizeW
GetComputerNameW
GetConsoleAliasExesLengthA
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceExW
GetDriveTypeW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileType
GetLargestConsoleWindowSize
GetLastError
GetLocalTime
GetLocaleInfoW
GetLogicalDriveStringsW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
GetOEMCP
GetPriorityClass
GetPrivateProfileSectionNamesA
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
GetVersion
GetVolumeInformationW
GlobalAlloc
GlobalFindAtomA
GlobalFree
GlobalSize
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
HeapSetInformation
HeapSize
InitializeCriticalSection
FindFirstFileW
InterlockedDecrement
InterlockedIncrement
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryW
LocalFileTimeToFileTime
LocalFree
MoveFileExW
MultiByteToWideChar
OpenSemaphoreA
PeekConsoleInputA
PostQueuedCompletionStatus
QueryDosDeviceW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleOutputW
ReadFile
ReadProcessMemory
RemoveDirectoryW
ResetEvent
RtlUnwind
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetFileTime
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VerifyVersionInfoW
VirtualQueryEx
WaitForMultipleObjects
WaitForSingleObject
WaitNamedPipeA
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
WriteProfileSectionW
lstrcmp
lstrcpyW
lstrlenA
lstrlenW
FindFirstChangeNotificationA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLanguageGroupsW
EnumResourceTypesW
EnterCriticalSection
DuplicateHandle
DosDateTimeToFileTime
DeviceIoControl
DeleteFileW
DeleteCriticalSection
CreateThread
CreateSemaphoreA
CreateProcessW
CreateFileW
CreateFileA
CreateEventA
CreateDirectoryW
CopyFileW
CompareStringW
CloseHandle
ClearCommBreak
LoadLibraryExA
GetProcAddress
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
user32
MapVirtualKeyA
MessageBeep
MessageBoxW
OffsetRect
PostMessageW
PostQuitMessage
RegisterWindowMessageW
ReleaseCapture
SendMessageA
SendMessageW
SetParent
SetWindowLongW
SetWindowTextW
ValidateRect
FillRect
EndDialog
DialogBoxParamW
DialogBoxParamA
CharUpperW
CharLowerBuffA
ChangeDisplaySettingsExA
LoadStringW
LoadCursorA
GetActiveWindow
GetFocus
GetMessageExtraInfo
GetClipboardSequenceNumber
CreateMenu
EndMenu
GetForegroundWindow
GetClipboardOwner
CreatePopupMenu
GetDoubleClickTime
GetCapture
GetCursor
GetKBCodePage
GetCaretBlinkTime
GetClipboardViewer
GetDesktopWindow
CountClipboardFormats
AnyPopup
CloseClipboard
GetMenuCheckMarkDimensions
GetInputState
InflateRect
GetWindowThreadProcessId
GetWindowLongW
GetWindow
GetTopWindow
GetSystemMetrics
GetDialogBaseUnits
GetSysColorBrush
GetMenuInfo
GetDlgItem
GetCursorPos
BroadcastSystemMessageW
GetClassInfoW
gdi32
SaveDC
AddFontResourceA
CreateSolidBrush
DeleteObject
ExtEscape
UnrealizeObject
GdiGetLocalFont
GdiPlayDCScript
GetDIBits
StretchBlt
StrokeAndFillPath
PathToRegion
StrokePath
WidenPath
UpdateColors
SwapBuffers
RealizePalette
GetTextCharset
GetTextColor
GdiEntry5
SetMetaRgn
advapi32
DecryptFileW
RegOpenKeyW
RegCloseKey
RegQueryValueExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
shell32
SHPathPrepareForWriteW
SHGetPathFromIDListW
SHBrowseForFolderW
CommandLineToArgvW
ShellAboutA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
IsEqualGUID
shlwapi
StrCmpNIW
StrCmpNA
UrlCreateFromPathW
PathRemoveExtensionW
comctl32
ImageList_Create
Sections
.text Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ