Static task
static1
Behavioral task
behavioral1
Sample
VirusShare-0d596bd439c7177a88cbfee0f5737f36.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare-0d596bd439c7177a88cbfee0f5737f36.exe
Resource
win10v2004-20231222-en
General
-
Target
VirusShare-0d596bd439c7177a88cbfee0f5737f36
-
Size
11KB
-
MD5
0d596bd439c7177a88cbfee0f5737f36
-
SHA1
1f24f4eb0373ceab9b6c6441775c52fedd11ba71
-
SHA256
41af1f9383924a7a9b6a26beaec8ea763b7e8c469c615345b18d8505225029c3
-
SHA512
3841af851a19d78cce264c13875ea513280d33d5a5296133e0b907f10c87d6f3f0c38c6d53c702e270542ca9ec520bafc5d2e14a2e7674d3370d45a2b7ad677a
-
SSDEEP
192:Ae1Kp9rfpH0qZaY0Ndf9Tz/xybNGKNPoBCx0N9EvEHTzJ1rsmIp:A0Kp9rhvZaY0NdBz/yNPPx0NEEHha
Malware Config
Signatures
-
Detects executables packed with MEW 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_MEW -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare-0d596bd439c7177a88cbfee0f5737f36
Files
-
VirusShare-0d596bd439c7177a88cbfee0f5737f36.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE