F:\wCHeyIF\okhrrcWit\ebKVtkgBgopvwg\GansNcI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_adb57ac51c3371f8dfcc9a29e03aa1d4.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
VirusShare_adb57ac51c3371f8dfcc9a29e03aa1d4.dll
Resource
win10v2004-20231215-en
General
-
Target
VirusShare_adb57ac51c3371f8dfcc9a29e03aa1d4
-
Size
1.5MB
-
MD5
adb57ac51c3371f8dfcc9a29e03aa1d4
-
SHA1
aa0b03a9d23ddd7f2cb2c7dae7ccb24ac4977254
-
SHA256
14a7128a5ee9e62ea9133dc7634f42045b32da0326427d8ea0703375ecaeee73
-
SHA512
4095df88983215bd72e29086881e12c56632a4cb9478740d5e8150b048b566583d4e66a8f61836ef19d5b23a32f57c8c9f619572cb751e591faaa0d0707a472c
-
SSDEEP
3072:uSdJegO44ip3CtrrQKh/y0ipqdv9MHykZw4bZb:uSdsgxZsoqdFMHyKbZb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_adb57ac51c3371f8dfcc9a29e03aa1d4
Files
-
VirusShare_adb57ac51c3371f8dfcc9a29e03aa1d4.dll windows:5 windows x86 arch:x86
de7e2dcd3d373b8108b9728302283b97
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
gdi32
GetMapMode
SetLayout
SelectPalette
FillRgn
RestoreDC
Polygon
GetDeviceCaps
AddFontResourceW
SetTextAlign
SetBkColor
StartPage
ResizePalette
CreateRectRgn
user32
ReleaseDC
SendNotifyMessageW
GetMenu
CharLowerBuffW
DrawFrameControl
GetDlgItem
PostMessageA
GetSystemMetrics
LoadCursorA
MessageBoxExA
CloseDesktop
BeginDeferWindowPos
LoadIconA
GetDlgCtrlID
IsRectEmpty
GetScrollPos
SystemParametersInfoA
LookupIconIdFromDirectory
GetMonitorInfoW
DialogBoxIndirectParamA
GetClipCursor
FindWindowA
SendDlgItemMessageW
CharLowerA
MapVirtualKeyExW
DefFrameProcW
PostQuitMessage
ScreenToClient
comdlg32
GetOpenFileNameW
CommDlgExtendedError
ChooseColorW
PrintDlgExW
msvcrt
exit
shlwapi
PathSearchAndQualifyA
UrlGetPartW
ChrCmpIA
StrStrA
StrToInt64ExA
StrStrIA
ntdll
memset
kernel32
GetCommandLineW
QueryDosDeviceW
VirtualFree
GetTickCount
GlobalAlloc
SystemTimeToFileTime
lstrcpynA
PulseEvent
lstrlenW
GetStdHandle
WaitForMultipleObjects
lstrcmpiW
GetVersion
GlobalMemoryStatus
GetLastError
CreateMutexA
GetACP
CompareStringW
Exports
Exports
?LNJQE_EKWJBFNFEJf_k@@YGPA_NPAJ@Z
?rxbyfWWJY_JWPJJ__Uw@@YGXM@Z
?cdbjrIQILKKIp__e_w@@YGPAXPAJG@Z
?kktww_yuxhezAVKzmkl@@YGPAFPAE@Z
?k__p__Lrhvxozc_sqiD@@YGPAIHPAD@Z
?rycuACGFy_LP__@@YGEPAF@Z
RunAs
?mjloCAS_F@@YGHHF@Z
?_IFTEX_@@YGXF@Z
?snsppTC_@@YGPADE@Z
?f_r_ojJH__F_X_@@YGGG_N@Z
?mnE_QRSc@@YGXJ@Z
?OX_VBTzirileqsv_dr@@YGJIPAH@Z
?io_zQPVHsk@@YGPAXEPAI@Z
SensNotifyNetconEvent
?KRAueserCD@@YGXJD@Z
?AKVQstaqh_K__TWS@@YG_NGH@Z
SensNotifyRasEvent
?F_M__KdGEAytz__ip_SRV@@YGJHG@Z
?ibk_ajZXsfd_yjz_s@@YGPANPAK@Z
?ufBSctjXv__dtpw@@YGXED@Z
?ud__RQ_Poymljd__x_sn@@YGEPAJPAE@Z
?KRFORJOApvl_igsnjatwKC@@YGPADPAIJ@Z
?tvhaxxalM_DYSPtf_@@YGMPAN@Z
?zs_gJDQR__JJvx@@YGFPAKPAJ@Z
?CQV_NFtaI_U__Hmo@@YGNK@Z
?dcd_pZQENTX__OHP@@YGHPAFPAG@Z
?qlua_pq_yy@@YGPAEF@Z
?vtappblfV@@YGIM@Z
?_qentYHk_x_n__mydc_pg@@YGXPAM@Z
?j_gCOA_P_O@@YGPAFJK@Z
SensNotifyWinlogonEvent
?g_nxa_mthyme@@YGEI@Z
?fffj_NNYG_h_UTHSH_sdmp@@YGEG@Z
?ouluihhzvnmfn_VWJAGM_@@YGPAKGE@Z
?___GJ_URXG_@@YGXMPAG@Z
?uoo_qtmczkrrYM@@YGMI@Z
?_i_eu_IB_JMQ_H_MMQOARj@@YGPAXK@Z
?be_b_vlfjYY@@YGHPAM@Z
ServiceMain
?o__k_nehjzlg@@YGXPAFPAE@Z
?AXWVNSQOP__HK_UOKRNBFo@@YGIF@Z
?gfxTIOERLUK_yts_@@YGHPAHD@Z
?x_ir_p_pue_@@YGKNPAF@Z
?xwznq_ii_rJY__SHXtv@@YGPAHFE@Z
?kawhVMUNU@@YGPAJPAM@Z
?OCkaoaz_mmw@@YGEPAEK@Z
?ekzdhFb__mmorqluhKX@@YGEF@Z
?_ijnaNTFqrPEGKQecxsm@@YGJF@Z
StartAs
?U_TBUkk_nbyw@@YGFPA_NPAK@Z
?bzsrmigIHE@@YGPAMPAF@Z
?C_Y_HCCVLq_yu__g@@YGJ_NPAF@Z
?MXG_ZY_HX_CDWMQtd_HX@@YGPAJE@Z
?fpatq_c_tlmG@@YGFEPAI@Z
?cacvfgU_Zw_qlv_@@YGPAIPAMG@Z
?_nx_U_L@@YGIEI@Z
?_L_ZR___@@YGPAKIN@Z
?_NKERZNIX__@@YGDG@Z
?s___gybuajaq_vgjic@@YGPAXF@Z
?_mtmlCTJJL@@YGPAJG@Z
?icbxl_sqYUQfv@@YGPA_NPAF@Z
?Ppm_fS_mb__@@YGDPAI@Z
�xB
?hrlxynmg_A@@YGEFE@Z
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.icode Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ