Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_82fb84ffef958a1aaafc3bcc095b5f35.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
VirusShare_82fb84ffef958a1aaafc3bcc095b5f35.exe
Resource
win10v2004-20240508-en
General
-
Target
VirusShare_82fb84ffef958a1aaafc3bcc095b5f35
-
Size
179KB
-
MD5
82fb84ffef958a1aaafc3bcc095b5f35
-
SHA1
689c65fb80fe43dc9497a4930aed1813409ef817
-
SHA256
e62e8f31fd2dd10e2a80620c49cb7030c9c8743587c8fd0c035ff751d186dd9a
-
SHA512
170dff7de6142bba9f25cdd952e2d04546a2432b5dc2f17a65f39e4f3f0167e71731f63ebb8358cc2cc5a82acfc65e140b171ab8c052663682a5e1c21e98014f
-
SSDEEP
3072:Dk0tgvyUO7tEfGlbmYxE0sZRlbhBzieMA8+3VlthuqBl3tlfpXOTlJmoyMJhjKaH:mxO7eudNsNtBziVRethTlPRUmDeKmw4p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_82fb84ffef958a1aaafc3bcc095b5f35
Files
-
VirusShare_82fb84ffef958a1aaafc3bcc095b5f35.exe windows:4 windows x86 arch:x86
b685f9ebd4c3d044604741ab8325b01e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetStockObject
user32
PostQuitMessage
RegisterClassExA
SendMessageA
SetFocus
MoveWindow
SetWindowLongA
SetWindowWord
ShowWindow
TranslateMessage
UpdateWindow
MessageBoxA
LoadIconA
LoadCursorA
GetWindowTextA
GetSystemMetrics
GetMessageA
GetClientRect
GetClassNameA
EnumWindows
DispatchMessageA
DefWindowProcA
CreateWindowExA
CallWindowProcA
SetForegroundWindow
kernel32
ExitProcess
VirtualProtect
Sleep
RtlZeroMemory
LoadLibraryA
GetModuleHandleA
GetLastError
GetCommandLineA
CreateThread
comctl32
InitCommonControls
msvcrt
atoi
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 368B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ