Static task
static1
Behavioral task
behavioral1
Sample
VirusShare-007df9096e84b80d4ac868f375d1c8f9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare-007df9096e84b80d4ac868f375d1c8f9.exe
Resource
win10v2004-20231215-en
General
-
Target
VirusShare-007df9096e84b80d4ac868f375d1c8f9
-
Size
311KB
-
MD5
007df9096e84b80d4ac868f375d1c8f9
-
SHA1
2c399a202486632dfe5305c6314475d2a3c8bf4b
-
SHA256
4a72da49a2ef76e6ba84dc419c9d2fa64446352bc923bef128d24d439456d1fd
-
SHA512
19193330242b66bd0310c9f8d1b2bfeca6c027e1972deb3bf752e005c3dfd72cd9610d834d126883b5b9b4a607a9043558c2d486a8728ea36943fae441ced0bf
-
SSDEEP
768:2Lk5P3+XmoDjI2rbZBMOnkJqKLMoKz+ns:Qk130myjFBvniqPz+ns
Malware Config
Signatures
Files
-
VirusShare-007df9096e84b80d4ac868f375d1c8f9.exe windows:4 windows x86 arch:x86
Code Sign
01Certificate
IssuerCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6dNot Before01-08-1996 00:00Not After31-12-2020 23:59SubjectCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d0aCertificate
IssuerCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6dNot Before06-08-2003 00:00Not After05-08-2013 23:59SubjectCN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZAExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
23:c0:ef:6b:ed:03:1e:e3:34:c6:09:ae:d6:dd:60:82Certificate
IssuerCN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZANot Before11-02-2009 00:00Not After11-02-2011 23:59SubjectCN=FAVORIT NETWORK S.L.,OU=Secure Application Development,O=FAVORIT NETWORK S.L.,L=BARCELONA,ST=BARCELONA,C=ESExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ