Static task
static1
Behavioral task
behavioral1
Sample
VirusShare-009993f17a69e3fe451a60099df70f00.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
VirusShare-009993f17a69e3fe451a60099df70f00.exe
Resource
win10v2004-20231215-en
General
-
Target
VirusShare-009993f17a69e3fe451a60099df70f00
-
Size
84KB
-
MD5
009993f17a69e3fe451a60099df70f00
-
SHA1
0ca3618a0edee625207fceafed242d75bcc89094
-
SHA256
6cab193e18978a54126a78cc5c26b17c0bb40e2d3ef5f518c4f0d21f13a4999a
-
SHA512
00fefbe62ac2a4eff9b50e66d1c7dc91165d913b3251585e86473b9a039c302368e8ab7d4943fc9496dafafa893aca572fa73ef58db108a129dd02e7f2e845bd
-
SSDEEP
1536:hRg6mPHeBsKg+s3hHvINQ7OH7C7O6KnaAZaHc3y:fgjHssZRHvgOOdnrZMyy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare-009993f17a69e3fe451a60099df70f00
Files
-
VirusShare-009993f17a69e3fe451a60099df70f00.exe windows:4 windows x86 arch:x86
87d9aca37d0daa644f5b21b50d724114
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord860
ord6648
ord858
ord5856
ord6663
ord941
ord540
ord2614
ord800
ord823
ord2915
ord825
msvcrt
_local_unwind2
strncpy
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
atoi
__CxxFrameHandler
_except_handler3
sprintf
strstr
rand
puts
srand
_exit
_stricmp
_strlwr
kernel32
Sleep
LoadLibraryA
GetProcAddress
CreateThread
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetTickCount
user32
GetWindowTextA
PostMessageA
EnumChildWindows
SetWindowPos
ShowWindow
GetSystemMetrics
FindWindowExA
EnumWindows
GetClientRect
Sections
.text Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
.data
-
.rdata
-
.rsrc/0/INI/102
-
.rsrc/0/INI/103
-
.rsrc/2052/GROUP_ICON/101
-
.rsrc/2052/ICON/1.ico
-
.rsrc/2052/ICON/2.ico
-
.rsrc/2052/MANIFEST/1.xml
-
.rsrc/2052/version.txt
-
.rsrc_1
-
.text