Static task
static1
Behavioral task
behavioral1
Sample
VirusShare-9a6229ebc128e7c9619409827da7a621.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare-9a6229ebc128e7c9619409827da7a621.exe
Resource
win10v2004-20231215-en
General
-
Target
VirusShare-9a6229ebc128e7c9619409827da7a621
-
Size
20KB
-
MD5
9a6229ebc128e7c9619409827da7a621
-
SHA1
1fda1f26502f1e70af4197480154dbb01b0e0310
-
SHA256
3b6b94e3cfde95e8bfa8d3f04503489fce38dd3c4547834efc74e261543cb1ec
-
SHA512
250ded6c51228b23273d632f406f72e60b71c4ec55e8f4c46c923f0f030ebf0be90f4338fd86de2fee65cc21139db227fb44698bc017871f6528dce909578872
-
SSDEEP
96:JK3o/x5pKqL+LK5L6OFICnG81OrWla8IQPtboynilm0thKcAW:M3o/xDKqPKWG81OrCdP1oynil3mjW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare-9a6229ebc128e7c9619409827da7a621
Files
-
VirusShare-9a6229ebc128e7c9619409827da7a621.exe windows:4 windows x86 arch:x86
3de8d52d447d4751e2cfabaf560f76c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lclose
WriteFile
OpenFile
GetModuleFileNameA
WaitForSingleObject
CreateProcessA
lstrcatA
DeleteFileA
CloseHandle
Sleep
GetModuleHandleA
GetStartupInfoA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
ws2_32
socket
WSACleanup
WSAStartup
htons
gethostbyname
closesocket
sendto
select
recvfrom
wininet
InternetOpenA
InternetSetOptionA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
iphlpapi
GetAdaptersInfo
msvcrt
sprintf
_controlfp
_except_handler3
__set_app_type
__p__fmode
__getmainargs
_acmdln
exit
__p__commode
_XcptFilter
_exit
_initterm
_adjust_fdiv
__setusermatherr
strrchr
_ltoa
??3@YAXPAX@Z
??2@YAPAXI@Z
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ