Static task
static1
Behavioral task
behavioral1
Sample
VirusShare-7eec2cdf7d9256068d5a9590135b5d86.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare-7eec2cdf7d9256068d5a9590135b5d86.exe
Resource
win10v2004-20231215-en
General
-
Target
VirusShare-7eec2cdf7d9256068d5a9590135b5d86
-
Size
40KB
-
MD5
7eec2cdf7d9256068d5a9590135b5d86
-
SHA1
dc5db51c1527ebca21beff628dbc9ad0eccefcf2
-
SHA256
d66fb8ccf614657bd9facbad55a08b457c00dc067d7e69675f0adfbe07dbfd3d
-
SHA512
e286816fb4a717fbb4fb0fa79a065b6672cd9353a8774666e9f3cb825a41318369eaffd7796607ab0d59b85033587714a1bc0cd012be372d30c4b802e2488e27
-
SSDEEP
768:/bN1A1Ni9OEpmk8kQohCX2vJRWAi6JlI:/p/5h8kXCmv5Jl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare-7eec2cdf7d9256068d5a9590135b5d86
Files
-
VirusShare-7eec2cdf7d9256068d5a9590135b5d86.exe windows:4 windows x86 arch:x86
171b8720df67f125948890bc20d7e8c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenA
InternetOpenUrlA
InternetSetFilePointer
InternetReadFile
InternetCloseHandle
kernel32
WriteFile
Sleep
GetTickCount
CloseHandle
GetLastError
SetFilePointer
CreateFileA
HeapAlloc
GetProcessHeap
HeapFree
CompareStringA
MultiByteToWideChar
DeleteFileA
GetCommandLineA
lstrcatA
GetWindowsDirectoryA
GetTempPathA
lstrlenA
GetModuleFileNameA
WaitForSingleObject
CreateProcessA
GetLocaleInfoA
HeapSize
VirtualProtect
GetSystemInfo
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GlobalAlloc
LCMapStringW
VirtualQuery
InterlockedExchange
GetSystemTimeAsFileTime
RtlUnwind
LCMapStringA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStringTypeA
GetStringTypeW
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
user32
wsprintfA
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE