Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_2e5a2049b13ffdae61eff0075d0c0e70.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
VirusShare_2e5a2049b13ffdae61eff0075d0c0e70.exe
Resource
win10v2004-20231215-en
General
-
Target
VirusShare_2e5a2049b13ffdae61eff0075d0c0e70
-
Size
58KB
-
MD5
2e5a2049b13ffdae61eff0075d0c0e70
-
SHA1
338633407b82fa1c3e615c195f39dad504b3dc92
-
SHA256
a08b2205cc3b598a71b7f18aa1b8a2743830c578c08671780d2375a137413556
-
SHA512
2000b60e443c39f1671934e7da59f9a2936465cd2f6279189c96ad018440bd44744c330e00a6bf7dcca5c9b05282e1986f558d189840af4c4fa320e3ad99e937
-
SSDEEP
1536:Ce8DxGUq83VxorsFS6kM7P4N8GRWlN5whjd:b8DxGWL2w7c0N5whjd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_2e5a2049b13ffdae61eff0075d0c0e70
Files
-
VirusShare_2e5a2049b13ffdae61eff0075d0c0e70.exe windows:4 windows x86 arch:x86
142cd9c6836a56408e44e484dd9d69c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
crypt32
RegQueryValueExU
RegDeleteValueU
RegOpenKeyExU
RegCreateKeyExU
RegSetValueExU
kernel32
CreateFileA
InterlockedIncrement
GetTickCount
Sleep
HeapCreate
GetSystemDirectoryA
VirtualFree
ReadFile
GetStdHandle
CloseHandle
gdi32
UnrealizeObject
TextOutW
TextOutA
StretchDIBits
StretchBlt
StartPage
StartDocA
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetTextAlign
SetStretchBltMode
SetRectRgn
SetROP2
SetPixelV
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
version
VerQueryValueW
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA
advapi32
RegOpenKeyExA
RegQueryValueExA
Sections
.text Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE