Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_89f66c8fda11eaccab31966474fdf502.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_89f66c8fda11eaccab31966474fdf502.dll
Resource
win10v2004-20231215-en
General
-
Target
VirusShare_89f66c8fda11eaccab31966474fdf502
-
Size
171KB
-
MD5
89f66c8fda11eaccab31966474fdf502
-
SHA1
3440bb2479715f877e4fe0083a3656504b3a9b22
-
SHA256
bff337d59983716629f1a00916bdeffcc4aec2322d43ca978ea9b8c2bbb85c8f
-
SHA512
86fa1a33cb6f58ab3c1a35ae3b3021a7f2bd944e46025193b123c0dddab53e94e9b33a09c9d2228b8a2ea7860696f8a445de15b94e15b63af7efe9828bb37fcc
-
SSDEEP
3072:HEqFi1Fj/R2T3dIggWin7AWGFWT5Sb5z/2wxMAmlfX:niL2T4oFWTMB+KMAAf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_89f66c8fda11eaccab31966474fdf502
Files
-
VirusShare_89f66c8fda11eaccab31966474fdf502.dll windows:5 windows x86 arch:x86
a6db81ed16e57ae785b333768410646b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
VirtualAlloc
gdi32
CreateCompatibleDC
CreateFontIndirectW
CreatePen
CreatePolygonRgn
CreateSolidBrush
DeleteDC
DeleteObject
Ellipse
EnableEUDC
EnumFontFamiliesW
ExtTextOutA
ExtTextOutW
FillRgn
GetBitmapBits
CreateCompatibleBitmap
GetObjectW
GetRgnBox
GetStockObject
GetTextExtentExPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointW
GetTextMetricsW
OffsetRgn
CreateBitmap
Rectangle
SelectObject
SetBitmapBits
SetBkColor
SetTextColor
StretchBlt
TranslateCharsetInfo
BitBlt
GetFontData
PatBlt
comdlg32
ChooseFontW
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegOpenKeyExW
shell32
ShellAboutW
imm32
ImmSetConversionStatus
ImmSetCompositionStringW
ImmRegisterWordW
ImmIsIME
ImmAssociateContext
ImmConfigureIMEW
ImmCreateContext
ImmDestroyContext
ImmEnumRegisterWordW
ImmEscapeW
ImmGetCompositionStringW
ImmGetConversionStatus
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f444445 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f444444 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 766B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ