heiQoYIqy
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_014c2979341e0fb228b0e012908ea074.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_014c2979341e0fb228b0e012908ea074.dll
Resource
win10v2004-20231215-en
General
-
Target
VirusShare_014c2979341e0fb228b0e012908ea074
-
Size
216KB
-
MD5
014c2979341e0fb228b0e012908ea074
-
SHA1
45a363859eac3839eeade1c3ffe0bb63fdbafffc
-
SHA256
c954715963c8624bb2f049efad7be153c3576329f13363c47af409290ac0c645
-
SHA512
b5bc7043ee6b529b33023cac786ad1d225799c07dae7098d935d7eebe37cecffd51ea18c0d699e9c0959d1cfa298f5e763167972bb0d49af6e2b61d081935ce9
-
SSDEEP
3072:f9IlvaD+qB9J2eK7yyqRv1WbKrSzK+1zRYULCfG+yycemGRHMMr8wgJiEvwrMVjO:faw9ID75qRv1iKHktvU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_014c2979341e0fb228b0e012908ea074
Files
-
VirusShare_014c2979341e0fb228b0e012908ea074.dll windows:4 windows x86 arch:x86
c75f198705f992422cadd889e05f0ada
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLocaleInfoW
GetLastError
user32
DestroyMenu
LoadMenuA
TrackPopupMenu
GetSubMenu
gdi32
CreateCompatibleDC
DeleteDC
BitBlt
SelectObject
GetObjectA
comdlg32
ChooseColorA
shell32
SHGetDesktopFolder
Shell_NotifyIconA
ShellExecuteA
SHGetFileInfoA
ExtractIconExA
oleaut32
SafeArrayGetElement
GetErrorInfo
GetActiveObject
VariantInit
SafeArrayPtrOfIndex
SysAllocStringLen
SafeArrayAccessData
SysFreeString
VariantCopy
VariantChangeType
SafeArrayCreate
SafeArrayGetUBound
version
GetFileVersionInfoA
VerQueryValueA
comctl32
ord17
ImageList_Create
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Destroy
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ