Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_a03aba38569f278658aa946999390253.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_a03aba38569f278658aa946999390253.exe
Resource
win10v2004-20231222-en
General
-
Target
VirusShare_a03aba38569f278658aa946999390253
-
Size
58KB
-
MD5
a03aba38569f278658aa946999390253
-
SHA1
19830491c7f2e19a255e7c17e3c8b7e3a5b378fc
-
SHA256
d620d7997a539f84f64ef633750ad6c9b117d2304214b53f4d77c9fe997ebe78
-
SHA512
896477b99a176bad3663e0200434f73839957f1479511e9a7348ad86fe1a573c03a95b6677835ab800edd84d324737d731c909776d583b01d06e990155c01190
-
SSDEEP
1536:Ce8DxGUq8lexorsFS6kM7P4N8GRWlZ5whjd:b8DxGQQ2w7c0Z5whjd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_a03aba38569f278658aa946999390253
Files
-
VirusShare_a03aba38569f278658aa946999390253.exe windows:4 windows x86 arch:x86
142cd9c6836a56408e44e484dd9d69c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
crypt32
RegQueryValueExU
RegDeleteValueU
RegOpenKeyExU
RegCreateKeyExU
RegSetValueExU
kernel32
CreateFileA
InterlockedIncrement
GetTickCount
Sleep
HeapCreate
GetSystemDirectoryA
VirtualFree
ReadFile
GetStdHandle
CloseHandle
gdi32
UnrealizeObject
TextOutW
TextOutA
StretchDIBits
StretchBlt
StartPage
StartDocA
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetTextAlign
SetStretchBltMode
SetRectRgn
SetROP2
SetPixelV
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
version
VerQueryValueW
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA
advapi32
RegOpenKeyExA
RegQueryValueExA
Sections
.text Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE