_tKuuDwqe
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_1984122d0ebd688281ed77ac0aac7ec8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_1984122d0ebd688281ed77ac0aac7ec8.dll
Resource
win10v2004-20231222-en
General
-
Target
VirusShare_1984122d0ebd688281ed77ac0aac7ec8
-
Size
121KB
-
MD5
1984122d0ebd688281ed77ac0aac7ec8
-
SHA1
86a9117741448f4e84cef2fc08fa0717f78ed5b5
-
SHA256
58c45debf3bcc9d0662176866c2cd74754f29abed695495d77f4edb361a47453
-
SHA512
cb40674e35047b93c32929a814cb2cf94c3b937a17341b37291fce164f1a5e4c8287d85e618de4616cacd61066ba84e4f0467a112d87582d8fa7dc8304fbf6e4
-
SSDEEP
3072:4OdXKFxdr+PLED86b1Y9IcVYJhizERbkvArTqq:4QKFxdrkLEDLcOJhU2A43H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_1984122d0ebd688281ed77ac0aac7ec8
Files
-
VirusShare_1984122d0ebd688281ed77ac0aac7ec8.dll windows:4 windows x86 arch:x86
db9a8ce5576d7cf8dd2678b6457ac4f0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
FindWindowA
MoveWindow
LoadStringA
advapi32
GetTokenInformation
InitializeSecurityDescriptor
IsValidSecurityDescriptor
GetFileSecurityA
InitializeAcl
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 422KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ