Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_a80168ad193e594be2be9f00920e1e0a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_a80168ad193e594be2be9f00920e1e0a.exe
Resource
win10v2004-20231215-en
General
-
Target
VirusShare_a80168ad193e594be2be9f00920e1e0a
-
Size
183KB
-
MD5
a80168ad193e594be2be9f00920e1e0a
-
SHA1
245028a7656a3e31e67fe8710d2c67a2726b7645
-
SHA256
336af8c1d8cde7db957dcf52de110edd8204272f882964602ed06703c9d2f767
-
SHA512
8ef8aeba40ca26a4560c01902ae9176c91a1ac9c7db769f33156ec150a5cb5183c94654d1cf5a663d49eba0d2d70a25fcff61c3bcda50bccf04184361a48a49e
-
SSDEEP
3072:Q5+/Ncenef+X8ib6oioUsyeUHNRsnyqxCZCiLFMrod0Pp5IxQIIhJpS:Q5+eeef+s+7Uvtmn2ZC6Mrod0R5IxQIM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_a80168ad193e594be2be9f00920e1e0a
Files
-
VirusShare_a80168ad193e594be2be9f00920e1e0a.exe windows:5 windows x86 arch:x86
5f86156771da29ab6ea2953d8553c00c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowDC
shlwapi
ChrCmpIW
kernel32
GetCurrentDirectoryW
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rt_ecx Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rt_eax Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rt_esp Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rt_edx Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rt_ebx Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 317KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ