Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_b62587dc8304bbc9ce68d0e8098dcabb.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
VirusShare_b62587dc8304bbc9ce68d0e8098dcabb.exe
Resource
win10v2004-20240508-en
General
-
Target
VirusShare_b62587dc8304bbc9ce68d0e8098dcabb
-
Size
260KB
-
MD5
b62587dc8304bbc9ce68d0e8098dcabb
-
SHA1
969c18c86fa5e97341ae09ea268f87c06a42d7f0
-
SHA256
03fa142c0153a5651371ebefc567bf9988338050f9c185e3b0dafdc0f5092744
-
SHA512
67fc72e78ad5ec2e0bf8eec50e478421d8a36834dffb963b943bb1d4ed31e991dca5a70b3edb783899e4595f17895089aff69b30918f5749e2c11752645b98cf
-
SSDEEP
6144:PmcU60DxID/MygKh2eJyDnqWkRN8uRsyS0:elxxeMyB0NnhkQuRsI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_b62587dc8304bbc9ce68d0e8098dcabb
Files
-
VirusShare_b62587dc8304bbc9ce68d0e8098dcabb.exe windows:4 windows x86 arch:x86
3973e5b7b7bae7947101b3ac6b3020b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
CopyLZFile
kernel32
GetStartupInfoA
GlobalFlags
FlushFileBuffers
FreeConsole
HeapLock
GetDefaultCommConfigW
GetModuleHandleA
shlwapi
PathCompactPathExW
PathRemoveBlanksW
SHDeleteKeyA
PathIsUNCServerShareA
PathQuoteSpacesW
SHDeleteValueW
SHRegDeleteEmptyUSKeyA
PathIsUNCW
StrFormatByteSizeA
PathIsSystemFolderW
PathCommonPrefixW
StrCmpIW
PathIsRootW
PathFindNextComponentA
SHDeleteKeyW
PathSearchAndQualifyW
StrPBrkA
PathMatchSpecW
SHRegWriteUSValueW
PathRemoveBlanksA
PathCommonPrefixA
PathAddBackslashW
StrSpnA
StrCpyW
StrCatW
PathParseIconLocationW
PathIsURLW
SHRegSetUSValueW
PathAddExtensionW
StrCSpnIW
PathCombineA
SHRegOpenUSKeyW
ChrCmpIW
PathIsRelativeA
SHDeleteValueA
PathSetDlgItemPathA
PathStripToRootW
PathUnmakeSystemFolderA
PathBuildRootA
SHDeleteEmptyKeyA
PathAppendW
SHEnumKeyExA
PathFindOnPathA
PathGetDriveNumberA
PathMakePrettyA
PathFindExtensionW
SHRegEnumUSKeyW
PathMatchSpecA
SHCreateShellPalette
PathIsUNCServerShareW
PathFindOnPathW
SHGetValueA
SHRegGetUSValueW
SHRegGetUSValueA
SHRegEnumUSKeyA
ChrCmpIA
PathRemoveFileSpecW
SHRegCreateUSKeyA
SHRegCreateUSKeyW
SHRegDeleteEmptyUSKeyW
PathCompactPathW
PathCanonicalizeA
PathFileExistsA
PathUnquoteSpacesA
PathMakeSystemFolderW
PathIsFileSpecA
PathRenameExtensionW
StrDupA
StrTrimW
PathRelativePathToA
SHRegEnumUSValueW
SHRegDeleteUSValueA
PathStripPathA
PathMakePrettyW
PathIsPrefixA
StrCSpnA
PathIsRootA
PathStripPathW
PathAppendA
PathBuildRootW
StrSpnW
PathIsDirectoryW
PathIsUNCA
SHQueryValueExW
PathRemoveBackslashA
SHQueryInfoKeyW
PathCanonicalizeW
StrNCatW
PathIsRelativeW
PathRemoveArgsA
StrFormatByteSizeW
PathFindNextComponentW
PathFindFileNameA
StrCmpW
SHEnumKeyExW
StrIsIntlEqualW
PathGetDriveNumberW
SHRegGetBoolUSValueA
StrCSpnIA
PathIsUNCServerA
PathGetArgsA
PathIsUNCServerW
PathIsFileSpecW
PathIsDirectoryA
PathAddBackslashA
PathUnquoteSpacesW
SHRegOpenUSKeyA
PathRemoveBackslashW
PathRenameExtensionA
PathIsSameRootW
SHQueryValueExA
PathIsContentTypeW
StrFromTimeIntervalW
SHSetValueW
SHRegWriteUSValueA
version
VerQueryValueW
GetFileVersionInfoSizeW
msvcrt
__p__commode
_controlfp
_except_handler3
__set_app_type
__p__fmode
_exit
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
oleacc
WindowFromAccessibleObject
pdh
PdhEnumMachinesA
mpr
WNetGetProviderNameW
WNetCancelConnectionA
WNetGetUniversalNameA
WNetAddConnection3W
WNetAddConnection2W
MultinetGetConnectionPerformanceW
WNetConnectionDialog
WNetAddConnectionW
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ