scn_ram.pdb
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_cddaea27856f280852f4b4352fccffb0.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VirusShare_cddaea27856f280852f4b4352fccffb0.dll
Resource
win10v2004-20240426-en
General
-
Target
VirusShare_cddaea27856f280852f4b4352fccffb0
-
Size
140KB
-
MD5
cddaea27856f280852f4b4352fccffb0
-
SHA1
9a22c49436f495adaaa114ecaebb4a6dd8009796
-
SHA256
a7ace2e43723f190393478188c7122e993ae17031f8318f4e0af755eb5211e92
-
SHA512
0158ad88b7fc80352362ff4f96fc46dda232033d31254148392108dc1b07bd9d49bc359990664cb46b6a889b13631b2299bcbe742b41b0fd7b5f550d0e090b00
-
SSDEEP
1536:Edp77txcPLjcd3PAVKxfr5gMpPqcnbzp95rb7dV19aujtu:EDtxcPPcVxxzxpbnT5rHh7t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_cddaea27856f280852f4b4352fccffb0
Files
-
VirusShare_cddaea27856f280852f4b4352fccffb0.dll windows:4 windows x86 arch:x86
680bf9eeb9f441a77a20fbff4da0c17b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetLastError
LocalAlloc
lstrcpyW
LocalFree
GetSystemTimeAsFileTime
WaitForSingleObject
GetCurrentProcess
GetFileType
GetProcAddress
LoadLibraryExA
IsSystemResumeAutomatic
UnhandledExceptionFilter
TerminateProcess
SetUnhandledExceptionFilter
user32
GetDlgItemTextA
GetDialogBaseUnits
GetMenuItemID
ole32
CoCreateInstance
msvcrt
memset
Exports
Exports
SnowShow1
Sections
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 512B - Virtual size: 538KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ