Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_5825a3ad727716d27de4c82c93185f10.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_5825a3ad727716d27de4c82c93185f10.exe
Resource
win10v2004-20231215-en
General
-
Target
VirusShare_5825a3ad727716d27de4c82c93185f10
-
Size
250KB
-
MD5
5825a3ad727716d27de4c82c93185f10
-
SHA1
6f5841130c87e3f0942d59e000c749d9e1fd1841
-
SHA256
f1f99a4c587c6113f2b1895cd4f1dace2925e68a3b8b8a32fd411d3505f8a8d3
-
SHA512
e478263975530436c84b71022ce298a0ed729033cf6a709b1e2facfaf4f0e2ba7999eb21f42452935c2e67201690ef78b3b8355114c5624c07ac8eb1eb09aeb0
-
SSDEEP
6144:t7S5BlQn06XFwLtaR/63JaKIOH7AnnNkRaSbGqJl:4lSXF6acIs5RaS1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_5825a3ad727716d27de4c82c93185f10
Files
-
VirusShare_5825a3ad727716d27de4c82c93185f10.exe windows:4 windows x86 arch:x86
eff834bcbbe1a3e927791347a6edb7ef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
LoadLibraryA
GetProcAddress
DeleteCriticalSection
HeapReAlloc
HeapAlloc
ExitProcess
GetLastError
FreeLibrary
GetCommandLineW
LoadLibraryW
CreateEventA
user32
LoadCursorW
advapi32
RegOpenKeyW
Sections
.rdata7 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata6 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata5 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata3 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text9 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ