Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_bed37266281a4af19966a76488047ba3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_bed37266281a4af19966a76488047ba3.exe
Resource
win10v2004-20231222-en
General
-
Target
VirusShare_bed37266281a4af19966a76488047ba3
-
Size
141KB
-
MD5
bed37266281a4af19966a76488047ba3
-
SHA1
f5bbdba8b42bb98ca71a8a6a6826290ee8d2bba6
-
SHA256
ae4a26fdd7cbb9a1a130b24fd52ddfc1c228feb388872e723a89b28aba7fb185
-
SHA512
61825501dacea1625d7d3aa9e03b36c95c82dd4524cfb64ece7a597758be4a87093ec7aee08aba90e760a375a50d3fb1096a048242b79d552466faabb508167c
-
SSDEEP
3072:qrcslmDBD7B4qoG7J4CiTCBxJ9+/ts2zWHX8:VV1thiTgJ96DzWM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_bed37266281a4af19966a76488047ba3
Files
-
VirusShare_bed37266281a4af19966a76488047ba3.exe windows:4 windows x86 arch:x86
4d0fa9f2335ac52990e999a9d9e0040c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdsapi
DsBindWithCredW
DsBindWithSpnA
DsBindWithSpnW
mscat32
CryptCATClose
mpr
WNetAddConnectionA
aclui
EditSecurity
mapistub
BMAPISaveMail
certcli
CACloseCertType
CADeleteCertType
mlang
LcidToRfc1766A
kernel32
GetWindowsDirectoryA
CreateFileA
LoadLibraryW
GetACP
GetLastError
GetACP
GetTickCount
Sleep
CompareStringA
glu32
gluLoadSamplingMatrices
mtxex
GetObjectContext
MTSCreateActivity
MTSCreateActivity
clusapi
ClusterGroupCloseEnum
ClusterGroupControl
ClusterGroupEnum
crypt32
CertControlStore
lz32
LZRead
advapi32
AccessCheckByType
Sections
dryir Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
datrer Size: 5KB - Virtual size: 97KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
styr2 Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
tyrex Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE