?WorkInit@@YGXUverifyEw@CA7
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_2706b89a0645250dad512da0802a7470.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_2706b89a0645250dad512da0802a7470.exe
Resource
win10v2004-20231222-en
General
-
Target
VirusShare_2706b89a0645250dad512da0802a7470
-
Size
202KB
-
MD5
2706b89a0645250dad512da0802a7470
-
SHA1
6b18db9d7f70f9eae42b8270e18430475fde9723
-
SHA256
50705b94d672ce88f5771ce672a0efbb9ee1ab1e753081b73a76019544afa7b1
-
SHA512
cf999a1381f31b88dbbf3e56e3c6903bb8ec4d38e93e9804a6de74ad3e1b1408523da71f7021f3447910f247186f3b6021d25d2d3ef6ad73ba59685d6ef28bc9
-
SSDEEP
6144:OCIN3Q50lXBbwT8mj5QEFRXob5kFlAuqtcH3:OCINg4BbOVlHobmlAuv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_2706b89a0645250dad512da0802a7470
Files
-
VirusShare_2706b89a0645250dad512da0802a7470.exe windows:8 windows x86 arch:x86
bea5c80bcaa1887d9a4c5f09b9b0dde1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UnionRect
GetKeyState
shlwapi
UrlGetPartA
StrStrIA
StrCSpnA
UrlIsW
ord156
PathMakePrettyW
PathUndecorateW
kernel32
lstrcpyA
Exports
Exports
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ebp Size: 512B - Virtual size: 37B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orbe Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.erdat Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orbz Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.esp Size: 1024B - Virtual size: 617B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.irdat Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orbs Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ