Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_6783a84cf85ddeddf879baf70fdd5f9a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_6783a84cf85ddeddf879baf70fdd5f9a.exe
Resource
win10v2004-20231215-en
General
-
Target
VirusShare_6783a84cf85ddeddf879baf70fdd5f9a
-
Size
564KB
-
MD5
6783a84cf85ddeddf879baf70fdd5f9a
-
SHA1
0d90049c20db19368c65c1270e5ed4ea823143a4
-
SHA256
15ef70cd8e605c5684103e22fb74736fbc777a0705379df5f3f867a7f1223fbd
-
SHA512
3455d059d51a41e5af0a278caf9246ffc0dc9532eef98b48130c6e9aeb33ec9f6139cd157ec9118eecf3f3f8f9dcfb08f2d427e769d0f21d5fa55a753dd7a116
-
SSDEEP
12288:+4SXEXoVZkTIWU6N+Ewbr+W1JaJTZVT8ZHPfjq:+4SXEXoVZksD6N+N3+W8TZVT8ZHX2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_6783a84cf85ddeddf879baf70fdd5f9a
Files
-
VirusShare_6783a84cf85ddeddf879baf70fdd5f9a.exe windows:4 windows x86 arch:x86
ff46bf607cc528bed4af1b4c37c94883
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendIMEMessageExA
RegisterClassExA
CharNextA
CharNextExA
GetWindowLongA
DrawStateW
RegisterClassA
DefMDIChildProcW
ReuseDDElParam
OpenIcon
BringWindowToTop
SendIMEMessageExW
MessageBoxA
comdlg32
ReplaceTextW
LoadAlterBitmap
PrintDlgW
ChooseColorW
gdi32
PlgBlt
SetBitmapDimensionEx
SetTextAlign
GetFontLanguageInfo
GetEnhMetaFileHeader
GetTextAlign
ResetDCA
GdiPlayDCScript
GetWorldTransform
InvertRgn
GetTextCharset
PolyBezierTo
CreateDIBPatternBrush
SelectObject
GetICMProfileW
ExtTextOutW
PolyPolygon
CheckColorsInGamut
PolyDraw
advapi32
LookupSecurityDescriptorPartsW
CryptAcquireContextA
RegEnumKeyExA
CryptGetProvParam
RegLoadKeyA
CryptSignHashW
RegOpenKeyExA
CreateServiceW
RegSetKeySecurity
CryptImportKey
RegQueryValueExA
StartServiceA
CryptGetUserKey
GetUserNameA
LookupPrivilegeValueW
LogonUserA
CryptEnumProvidersW
kernel32
HeapFree
GetTickCount
TlsSetValue
VirtualQuery
SetConsoleCtrlHandler
FreeEnvironmentStringsA
ExitProcess
TerminateProcess
SetEvent
EnumSystemLocalesA
InterlockedIncrement
TlsAlloc
GetFileType
InitializeCriticalSectionAndSpinCount
SetLastError
GetStringTypeW
HeapCreate
CreateMutexA
CloseHandle
GetLocaleInfoA
HeapSize
GetEnvironmentStrings
GetCPInfo
LeaveCriticalSection
CompareStringA
VirtualFree
GetOEMCP
GetStdHandle
WriteConsoleW
DeleteCriticalSection
FlushFileBuffers
SetHandleCount
HeapReAlloc
EnterCriticalSection
SetUnhandledExceptionFilter
CompareStringW
IsValidCodePage
GetUserDefaultLCID
SetFilePointer
GetConsoleOutputCP
GetConsoleCP
GetTempFileNameW
GetStringTypeA
QueryPerformanceCounter
GetCurrentThread
WriteConsoleA
WriteFile
IsDebuggerPresent
GetEnvironmentStringsW
GetModuleFileNameA
GetTimeFormatA
GetModuleHandleW
VirtualAlloc
CreateFileA
GetTimeZoneInformation
GetDateFormatA
GetLastError
WideCharToMultiByte
MultiByteToWideChar
TlsGetValue
GetStartupInfoA
GetCurrentThreadId
SetEnvironmentVariableA
SetStdHandle
LCMapStringW
FreeLibrary
LoadLibraryA
FillConsoleOutputAttribute
FreeEnvironmentStringsW
GetModuleHandleA
UnhandledExceptionFilter
IsValidLocale
LCMapStringA
GetCurrentProcessId
OpenMutexA
GetVersion
GetProcAddress
GetLocaleInfoW
RtlUnwind
ReadFile
Sleep
TlsFree
HeapDestroy
GetSystemTimeAsFileTime
GetCommandLineA
GetConsoleMode
InterlockedDecrement
InterlockedExchange
HeapAlloc
GetCurrentProcess
GetACP
shell32
SHAppBarMessage
comctl32
InitCommonControlsEx
Sections
.text Size: 225KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 317KB - Virtual size: 317KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE