KYqruoIFr
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_69050e6c8f0d5bba26eab9b6abc9e265.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_69050e6c8f0d5bba26eab9b6abc9e265.dll
Resource
win10v2004-20231222-en
General
-
Target
VirusShare_69050e6c8f0d5bba26eab9b6abc9e265
-
Size
76KB
-
MD5
69050e6c8f0d5bba26eab9b6abc9e265
-
SHA1
51e7eef88ad0c6cfe9aa55ecd349b9776747e163
-
SHA256
8c5871a9b15a8ea6a4555906faac2dfba71bc46ed8dd51cc7817142a0b4b491b
-
SHA512
eb3166e0d5e8e3f43469ca80a13de0d13bfd0b9b5e9ed171c48f978f01652322c17bcb05c966c0a006efd466fc977d3458ab7d1a9606cca6bf85abb9c7d1a953
-
SSDEEP
1536:fzk36HlJRbjBa0LHpTQVd/2/KxJPfSb40shFyEHdOeNoz:fzkKFJlta0LHpkVdwKXp7UeCz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_69050e6c8f0d5bba26eab9b6abc9e265
Files
-
VirusShare_69050e6c8f0d5bba26eab9b6abc9e265.dll windows:4 windows x86 arch:x86
01ebd8d8be2d6500dbd6c5d9b859d36b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
GetLocaleInfoW
user32
DestroyMenu
GetSubMenu
LoadMenuA
TrackPopupMenu
gdi32
BitBlt
SelectObject
CreateCompatibleDC
GetObjectA
DeleteDC
comdlg32
ChooseColorA
GetSaveFileNameA
shell32
Shell_NotifyIconA
ShellExecuteExA
ShellExecuteA
SHGetFileInfoA
ExtractIconExA
SHGetDesktopFolder
oleaut32
GetActiveObject
GetErrorInfo
VariantInit
VariantClear
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
SysReAllocStringLen
SysAllocStringLen
SafeArrayUnaccessData
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 413KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ