Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_4f488a09e2895c4184cc451e95da0599.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_4f488a09e2895c4184cc451e95da0599.dll
Resource
win10v2004-20231215-en
General
-
Target
VirusShare_4f488a09e2895c4184cc451e95da0599
-
Size
211KB
-
MD5
4f488a09e2895c4184cc451e95da0599
-
SHA1
b613892e6bfd232c88d62290e99933b34a82fa0a
-
SHA256
1168cb8c9fa8b8284aedb4d7bae0a1c223c0c5155dc8baf7abcfd3b044341474
-
SHA512
c79dec9a1d939b2a7b2a8193ed364d4a520fe85fc1ac66b30c96568d2f8fb09aa37df28662c157d93e9f319391922a272f2c271e9ccb35bb73c61c10d6cc2248
-
SSDEEP
3072:rTJztPmNhnIiaDCjqW9DKZr9+VwYddG+czMoKf6:NxmL1aDMqQDK6Ce846
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_4f488a09e2895c4184cc451e95da0599
Files
-
VirusShare_4f488a09e2895c4184cc451e95da0599.dll windows:5 windows x86 arch:x86
5566fb1f6405a2b6cf03eae8e827918e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileW
lstrcatW
VirtualAllocEx
GetWindowsDirectoryW
user32
BeginPaint
UpdateWindow
ScrollWindow
SetScrollPos
SetScrollRange
ReleaseDC
GetDC
AppendMenuA
CallMsgFilterW
CascadeWindows
ChangeDisplaySettingsW
CharToOemA
CheckMenuItem
CloseDesktop
CopyAcceleratorTableA
CopyRect
CreateIconFromResourceEx
CreateMDIWindowA
DdeClientTransaction
DdeCreateStringHandleW
DdeFreeStringHandle
DdePostAdvise
DdeSetQualityOfService
DeregisterShellHookWindow
DrawStateW
EndDialog
EndMenu
EnumChildWindows
GetAltTabInfo
GetClassLongW
GetClipboardOwner
GetComboBoxInfo
GetInputState
EndPaint
GetMessageA
GetScrollPos
GetScrollRange
GetSubMenu
GetUpdateRect
GetWindowRgn
GetWindowThreadProcessId
IMPQueryIMEA
InSendMessageEx
InsertMenuItemA
IsCharUpperW
IsDialogMessageA
LoadKeyboardLayoutW
LockWorkStation
MoveWindow
OemToCharBuffW
RegisterClassExA
RegisterDeviceNotificationW
RemoveMenu
ScrollDC
SendDlgItemMessageA
SendMessageW
SendNotifyMessageW
SetDlgItemTextW
SetWindowWord
SystemParametersInfoW
TabbedTextOutA
TileWindows
ToAscii
TrackPopupMenuEx
TranslateMessage
UnhookWindowsHookEx
VkKeyScanA
VkKeyScanExA
WaitForInputIdle
WindowFromDC
PostQuitMessage
DefWindowProcA
LoadIconA
CreateWindowExA
GetKeyboardLayout
gdi32
TextOutA
GetTextMetricsA
advapi32
RegOpenKeyExA
Sections
.text Size: 203KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ