Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_336d1fbec78986b2e640acba3beb5ba0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VirusShare_336d1fbec78986b2e640acba3beb5ba0.exe
Resource
win10v2004-20240508-en
General
-
Target
VirusShare_336d1fbec78986b2e640acba3beb5ba0
-
Size
200KB
-
MD5
336d1fbec78986b2e640acba3beb5ba0
-
SHA1
ada3301117d7e26d324f77f20762edd1cd591353
-
SHA256
a0b5670bd688bbf3477fbdfd7ceebe5cfd4bf1f777972b8cb65ba75ae2c5cbb0
-
SHA512
d02c42385a5bec654e2ecccd5b564af41b9df6f54a5bc0d8b9796ae9ed8e297bbb6d9b91e8aa73327e6406e69364d3c6ca0d7c6a255a9fc7da33e3d10d75d359
-
SSDEEP
3072:zqNLtRaSY2GbvjfMSB9oueJcm9ISnV1OCTiuuvk9p85/bLPSQru0DbPc1r0EFbDB:bx24ffo/n2C2US/bLPSobPPEFbD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_336d1fbec78986b2e640acba3beb5ba0
Files
-
VirusShare_336d1fbec78986b2e640acba3beb5ba0.exe windows:4 windows x86 arch:x86
97bbb6e7ae591124a8ae5ccb3bb17bc0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
GetModuleHandleW
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
LoadLibraryW
GetLastError
HeapFree
HeapAlloc
ExitProcess
GetVersionExA
GetProcessHeap
GetStartupInfoW
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
LoadLibraryA
InitializeCriticalSection
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException
user32
MessageBoxA
Sections
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 176KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ