Static task
static1
Behavioral task
behavioral1
Sample
VirusShare-0048e6f855149c139b6aa90a8c416d5f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
VirusShare-0048e6f855149c139b6aa90a8c416d5f.exe
Resource
win10v2004-20231222-en
General
-
Target
VirusShare-0048e6f855149c139b6aa90a8c416d5f
-
Size
180KB
-
MD5
0048e6f855149c139b6aa90a8c416d5f
-
SHA1
b6c4462abdccfd4ba8a876e05fa08cf18e4f3eca
-
SHA256
a15d3d48d2b5c280db15c7d26e1246bb7588a1f88dafdc3a4c934c3091cdf1cd
-
SHA512
dbf9476708707212b8b603c599b33ce3a1302de8199397298d622f942ef45c26cf6a5aa527c8e66367cab35963cc19d4bdc8bc30b42622a9b1e22024dce22574
-
SSDEEP
3072:+BSm1bymAmiM8NZPvyQ4sDRTDyhTtPO6G65mFOG64Mf8G9tx7QnWyuFfy07J3na:GyA8NtyQZaT+/o4k8G9nMWvjB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare-0048e6f855149c139b6aa90a8c416d5f
Files
-
VirusShare-0048e6f855149c139b6aa90a8c416d5f.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE