Static task
static1
Behavioral task
behavioral1
Sample
VirusShare-00aeb83eaeba8bbb4fb8d5736832b3b8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare-00aeb83eaeba8bbb4fb8d5736832b3b8.exe
Resource
win10v2004-20231222-en
General
-
Target
VirusShare-00aeb83eaeba8bbb4fb8d5736832b3b8
-
Size
28KB
-
MD5
00aeb83eaeba8bbb4fb8d5736832b3b8
-
SHA1
deca7e3d1b7c03b31372292934b55be40af628fe
-
SHA256
b068a78c62d4d361e9e64d0f27aa9ca0bac4bfe63a863033551bab65da8f44fb
-
SHA512
cf418a4e768f966ff0aac7ec554ffae62edbbf7fd223225351c045c1ed00acab65cb6a668c9a38800a34d2a50c50f9b19b0f178a937e51d7e5f3e9e58740f699
-
SSDEEP
384:vUJipxXn4uGSrPj+lFcktyiEh5iavKup68Ossr1C/rtnlF3pHRvHPE:8JivVGS7j+lpY1K46kmilF3pHRvHM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare-00aeb83eaeba8bbb4fb8d5736832b3b8
Files
-
VirusShare-00aeb83eaeba8bbb4fb8d5736832b3b8.exe windows:4 windows x86 arch:x86
5cbd7c6dedc9624cd37c6d6101fdb303
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryA
VirtualProtect
lstrlenA
CloseHandle
GetFileSize
CreateFileA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
GetModuleFileNameA
GetModuleHandleA
user32
wsprintfA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE