Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_797ef096891a71de58e307aaca63da20.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
VirusShare_797ef096891a71de58e307aaca63da20.exe
Resource
win10v2004-20240426-en
General
-
Target
VirusShare_797ef096891a71de58e307aaca63da20
-
Size
445KB
-
MD5
797ef096891a71de58e307aaca63da20
-
SHA1
cf5baac40af75db677d769f4216ba2a57944f7ab
-
SHA256
bab23d488451405e9d5785a195de4df0acbfa3fb66bb788f20ad568862a7671e
-
SHA512
b738568f8a2856e59f1a04e116ba8b6449ffab3178e11524e768d7ed650be7857fec5a6c1c32d98b25d35cef8c0110fb9585fd15a1fe5e018cd19c3237cd2d0f
-
SSDEEP
12288:/U1AjBd7/iWkUC36MnHTAWT3dWBuYogTH6c1ThXS:81QB9/i3XMWT3ACwhXS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_797ef096891a71de58e307aaca63da20
Files
-
VirusShare_797ef096891a71de58e307aaca63da20.exe windows:5 windows x86 arch:x86
e1afd2e78c12bfbf367b85cee3667ade
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
FlushFileBuffers
SetStdHandle
CreateFileA
ReadFile
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
GetStringTypeW
MultiByteToWideChar
LCMapStringW
LoadLibraryW
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
HeapFree
HeapQueryInformation
HeapSize
HeapReAlloc
WriteFile
GetConsoleCP
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
ExitProcess
GetSystemTimeAsFileTime
LocalAlloc
GetTickCount
FindNextFileA
RaiseException
CloseHandle
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetFileAttributesA
SetLastError
GetModuleHandleW
GetProcAddress
TlsFree
GetCurrentThreadId
GetConsoleMode
CompareStringW
SetEnvironmentVariableA
SetFilePointer
SetEndOfFile
lstrcpyA
LocalFree
GetEnvironmentStringsW
GetModuleHandleA
FindClose
GetLastError
FindFirstFileA
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
CreateFileW
UnhandledExceptionFilter
GetCurrentProcess
QueryPerformanceCounter
GetSystemInfo
lstrcatA
HeapCreate
GetProcessHeap
HeapAlloc
GetCurrentProcessId
GetFullPathNameA
TerminateProcess
GetModuleFileNameW
IsBadReadPtr
HeapValidate
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
user32
CopyRect
SetMenuItemInfoA
RegisterClassA
EndPaint
DestroyWindow
ScreenToClient
SendInput
FillRect
GetMenuItemID
GetSubMenu
FindWindowExA
SendMessageA
GetDC
FindWindowA
OffsetRect
ReleaseDC
GetMenuState
DefWindowProcA
GetMenuItemInfoA
GetMenuStringA
ShowWindow
GetMenuItemCount
DefMDIChildProcA
SystemParametersInfoA
GetSystemMetrics
SetWindowTextA
UpdateWindow
LoadCursorA
gdi32
SetTextColor
DeleteDC
CreateFontIndirectA
SelectObject
CreateCompatibleDC
CreateBitmapIndirect
SetTextJustification
CreateEllipticRgnIndirect
GetObjectA
GetStockObject
EnumFontsA
BitBlt
advapi32
LsaNtStatusToWinError
LsaFreeMemory
LsaQueryInformationPolicy
ole32
CoCreateGuid
CoFileTimeNow
msvfw32
DrawDibTime
crypt32
CertGetNameStringA
comctl32
ord17
ord16
rpcrt4
UuidToStringA
oledlg
ord4
Sections
.text Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ