Static task
static1
Behavioral task
behavioral1
Sample
VirusShare-01440307e996ca8612977cf16c190316.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare-01440307e996ca8612977cf16c190316.exe
Resource
win10v2004-20231222-en
General
-
Target
VirusShare-01440307e996ca8612977cf16c190316
-
Size
44KB
-
MD5
01440307e996ca8612977cf16c190316
-
SHA1
28bb443a91e31e2ff447de4142066964333e6bd7
-
SHA256
6afddd200d476183134e476b764d6ec32f6dbf2d1017cc2c2f42a4af1019954e
-
SHA512
0d0eacbfa6984a8559a25c67a16ff44ddb5e5f69bd62ca72b689a19a94cba8c31708cdcdc34161d1d8feca723f25f7b27350be3a16d1ae96775dd6112602cbc0
-
SSDEEP
768:xVMuc33zv3e5ipm2qyV7JtpJ/hHDmQH/It7Ru+3ddsd7nbcuyD7U:LM13T3TVq8pRhjV/ISd7nouy8
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare-01440307e996ca8612977cf16c190316
Files
-
VirusShare-01440307e996ca8612977cf16c190316.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE