Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_a580e890da185c5faf3821a6b8a6aa59.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
VirusShare_a580e890da185c5faf3821a6b8a6aa59.exe
Resource
win10v2004-20231222-en
General
-
Target
VirusShare_a580e890da185c5faf3821a6b8a6aa59
-
Size
57KB
-
MD5
a580e890da185c5faf3821a6b8a6aa59
-
SHA1
4159bff720733c0177577da756af983420b6892e
-
SHA256
c94f15bb19fe5373ccb22b2adce7758e37d05fd6b2d575eda4614519ec9494e2
-
SHA512
ee54b77d651b7db3d4dc924eae508b5bc9454feec5b24de3e8595246478c9e3d70d3c05735f17d699fc9259d5e5ac937ac84d6e2e76feafc48bf29580e639655
-
SSDEEP
1536:Ckug0DxGIl8hqxorsFS6kM7P4N8GRWlH5whjd:X0DxGPc2w7c0H5whjd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_a580e890da185c5faf3821a6b8a6aa59
Files
-
VirusShare_a580e890da185c5faf3821a6b8a6aa59.exe windows:4 windows x86 arch:x86
00276c5fd7867bc7304aa810ad8e2f86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
crypt32
RegEnumValueU
RegDeleteValueU
RegOpenKeyExU
RegCreateKeyExU
RegSetValueExU
kernel32
CreateFileW
InterlockedIncrement
GetTickCount
Sleep
HeapCreate
GetSystemDirectoryW
VirtualFree
ReadFile
GetStdHandle
CloseHandle
gdi32
UnrealizeObject
TextOutW
TextOutA
StretchDIBits
StretchBlt
StartPage
StartDocA
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetTextAlign
SetStretchBltMode
SetRectRgn
SetROP2
SetPixelV
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
version
VerQueryValueW
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA
Sections
.text Size: 512B - Virtual size: 485B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE