Static task
static1
Behavioral task
behavioral1
Sample
VirusShare-00946129cf265999952b59c447a0e321.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare-00946129cf265999952b59c447a0e321.exe
Resource
win10v2004-20231215-en
General
-
Target
VirusShare-00946129cf265999952b59c447a0e321
-
Size
24KB
-
MD5
00946129cf265999952b59c447a0e321
-
SHA1
f3c47307b40f2f5cae9fa89722c306fd72253145
-
SHA256
6e5c25801a6ab74133b0522167bcb1b57b14861e3d7525ee327009e0bee643f7
-
SHA512
4567916994ce46128e909e133d88d65a1d70b8dc65bab8c5f16251e9bd259ce28c6d045ec86ff2bf273dec9e1114f6c4f232d5d8690fe65056b29bff974c6b30
-
SSDEEP
384:PgdFGGFMyuBoy/w74bi1J5kizidz/OVXvj927UEKaKD2:PgfGGtArSJq9/OVXvj8YD2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare-00946129cf265999952b59c447a0e321
Files
-
VirusShare-00946129cf265999952b59c447a0e321.exe windows:4 windows x86 arch:x86
9bab84a56d3e085a09a3b316e8608444
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm50
ord622
ord516
ord625
ord550
ord593
ord594
ord598
ord632
ord526
ord528
ord529
DllFunctionCall
ord670
ord600
__vbaExceptHandler
ord608
ord609
ProcCallEngine
ord535
ord645
ord570
ord648
ord576
ord577
ord100
ord611
ord617
ord618
ord619
ord548
ord580
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 368B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ