T:\iyclecIKufsh\HAwhMSkbp\wMEcUvJczdpyl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_64f26f341dc59ee8c340fcae3ed2b4d5.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_64f26f341dc59ee8c340fcae3ed2b4d5.dll
Resource
win10v2004-20231215-en
General
-
Target
VirusShare_64f26f341dc59ee8c340fcae3ed2b4d5
-
Size
2.1MB
-
MD5
64f26f341dc59ee8c340fcae3ed2b4d5
-
SHA1
5bf2a4d34959007c1d7d85b45f8a2c5801636cb6
-
SHA256
4fb409b42ecc1d03c557e804df5aba0ba721fc885e8b3e5b7032a2551275d4e0
-
SHA512
b54bafc839e722e79e213d4babc303b9b123dfa78a7f622864058a2e0f58cc81b360db22eea67ba843397599a43b630218543d758dd2afbf070f96453eef579e
-
SSDEEP
3072:da/fT8nSPDyBL4ORnMAhr1yw649iS3BAarBQ/sVsVuSOUwQka/:WT8nftDD/i+Aa1csmYSNp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_64f26f341dc59ee8c340fcae3ed2b4d5
Files
-
VirusShare_64f26f341dc59ee8c340fcae3ed2b4d5.dll windows:5 windows x86 arch:x86
3982be96351b4ffc13f6d328116fcec6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
gdi32
BeginPath
CreateHatchBrush
ExtTextOutA
CreateICW
PtInRegion
GetTextExtentPointA
shlwapi
ChrCmpIW
msvcrt
_controlfp
strlen
__set_app_type
__p__fmode
__p__commode
_amsg_exit
_initterm
_ismbblead
_XcptFilter
ungetc
_exit
wcspbrk
_cexit
__setusermatherr
__getmainargs
kernel32
LoadLibraryA
HeapValidate
LoadLibraryW
IsValidLocale
GetCommModemStatus
GetModuleHandleW
GetModuleFileNameA
LoadLibraryExA
lstrlenA
GetFileAttributesExW
lstrcatA
user32
DrawEdge
DialogBoxIndirectParamA
DefDlgProcW
SendNotifyMessageW
ShowWindowAsync
MonitorFromPoint
MonitorFromRect
GetSysColor
IsCharUpperW
GetForegroundWindow
GetWindowDC
ShowCursor
CloseDesktop
GetClassNameW
EnumThreadWindows
KillTimer
GetKeyboardLayoutNameW
wsprintfW
GetParent
Exports
Exports
Run|U
SensNotifyNetconEve|U
SensNotifyRasEve|U
SensNotifyWinlogonEve|U
ServiceMa|U
Start|U
��H|U
?CreateDlgMessage@@YGHPAXPADK|U
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xyz Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 104KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE