_eFoyuBjy
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_e7287542d3d9c55601e14c8b28b8b8c0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_e7287542d3d9c55601e14c8b28b8b8c0.dll
Resource
win10v2004-20231222-en
General
-
Target
VirusShare_e7287542d3d9c55601e14c8b28b8b8c0
-
Size
17KB
-
MD5
e7287542d3d9c55601e14c8b28b8b8c0
-
SHA1
fa739c046566e34b1b54b65ef1ce2553d71773c1
-
SHA256
0df00e3b176a7c7b81c2015f2a6a67653402bcf5583a002a128ff618e9eacdfc
-
SHA512
061d691efd9b315e7a77e6d3509b97cd6448fae51547954011b9a0764bdb3ad002fe55772efa68f5a2c4ec274c9db3f4dfb687b2ab566890b3e237a61cf9f214
-
SSDEEP
384:eyymEJ/PdOBkyryITSSW1Bfyb4sYahkzSlC:7dM/lzFT76sQNC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_e7287542d3d9c55601e14c8b28b8b8c0
Files
-
VirusShare_e7287542d3d9c55601e14c8b28b8b8c0.dll windows:4 windows x86 arch:x86
e689be5b11d8eb44506b6d6d071773e6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
FindWindowA
AnimateWindow
MoveWindow
LoadStringA
advapi32
InitializeAcl
InitializeSecurityDescriptor
IsValidSecurityDescriptor
GetFileSecurityA
GetTokenInformation
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 95KB - Virtual size: 415KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ