Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_f162916a77f0f9ac7520d3502e33c123.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VirusShare_f162916a77f0f9ac7520d3502e33c123.exe
Resource
win10v2004-20240426-en
General
-
Target
VirusShare_f162916a77f0f9ac7520d3502e33c123
-
Size
157KB
-
MD5
f162916a77f0f9ac7520d3502e33c123
-
SHA1
2f88e651607042466ae44d6f55b6d110a4a1b071
-
SHA256
2f32eb9ca39e6ff36a5826de86af213c800ae26747e751c051580e45d83532d2
-
SHA512
facf6f1a6e1aa550bd54e44d8cf000962e716235c0ddf5dc3af08853aaf21582c20aee4edfaf79644d67f7ac99147896d871ad932f3717239ccd8321710506ab
-
SSDEEP
3072:m7NKb5aj7hAV4/QVdRdYu3yyMnoxiSWjJopLqMTeOvzT/X:m7Yb5NW/QfSyMnxJopLqYeIH/X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_f162916a77f0f9ac7520d3502e33c123
Files
-
VirusShare_f162916a77f0f9ac7520d3502e33c123.exe windows:4 windows x86 arch:x86
27f463e4071874193057e10d9a5594fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalSize
GetConsoleCP
lstrlenA
HeapCreate
WaitForSingleObject
GetModuleHandleA
ResumeThread
LoadLibraryExA
GetConsoleDisplayMode
GetSystemTime
HeapReAlloc
GetUserDefaultLangID
GetACP
GetAtomNameA
GetCommandLineA
WaitForSingleObject
SetLastError
LocalLock
VirtualProtect
GetVersion
InterlockedExchange
user32
ShowWindow
GetFocus
GetWindow
DragDetect
FillRect
GetDC
wsprintfA
FrameRect
GetCursorPos
CreateIcon
ReleaseDC
GetTitleBarInfo
SetForegroundWindow
GetParent
GetClassNameA
EndPaint
AnyPopup
DrawTextA
BeginPaint
ntshrui
SetFolderPermissionsForSharing
DllGetClassObject
GetNetResourceFromLocalPathA
DllCanUnloadNow
GetLocalPathFromNetResourceA
msacm32
acmFilterEnumA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ