Static task
static1
Behavioral task
behavioral1
Sample
VirusShare-01399660196ebbc61d90cfca7e508abe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare-01399660196ebbc61d90cfca7e508abe.exe
Resource
win10v2004-20231215-en
General
-
Target
VirusShare-01399660196ebbc61d90cfca7e508abe
-
Size
329KB
-
MD5
01399660196ebbc61d90cfca7e508abe
-
SHA1
f27e35afc08f05164b72aeb67a7a7929c9ad5596
-
SHA256
3485c5234ec9fa2276ff2d796777492aede18c1a150940baf73715f0e742880e
-
SHA512
da395abfa0b690b6a62788eb26096e3ad48b59a34f9dee1fc1a64ede97ed09c82d35abc60146a62072fd466a9adc6c099f2cac37b001cd1aa491aec2b0611271
-
SSDEEP
6144:yl+gXiu9tcN2CVy0bTgwa0LlecMnmcCNRj/8aR5cij71cpu8xPyn1SXQyNHLFwp:AZXOHxbTgn0Bv1cEj/8qXjKprCQAyVBG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare-01399660196ebbc61d90cfca7e508abe
Files
-
VirusShare-01399660196ebbc61d90cfca7e508abe.exe windows:4 windows x86 arch:x86
356ecc15eb68c783601f24c1e035a99e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
CloseHandle
HeapCreate
SetConsoleCP
GetAtomNameA
HeapReAlloc
InterlockedExchange
GetCommandLineA
CompareFileTime
GetModuleHandleA
GlobalUnlock
GetStdHandle
WaitForMultipleObjects
GetConsoleCP
SuspendThread
LoadLibraryExA
GetSystemDefaultLangID
VirtualProtect
GetVersion
lstrlenA
GetTickCount
user32
DialogBoxParamA
GetKeyState
SetScrollInfo
InvertRect
EnableScrollBar
DestroyMenu
IsDialogMessage
SetWindowPos
DrawCaption
DragObject
FindWindowA
CreateIcon
FillRect
SetPropA
InsertMenuA
GetKeyboardLayout
GetDlgItem
GetCursorInfo
CreateMenu
DispatchMessageA
advapi32
RegEnumKeyA
RegQueryInfoKeyA
RegCloseKey
RegEnumValueA
RegCreateKeyExA
version
VerQueryValueA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ