?WorkInit@@YGXUverifyEw@CA7
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_b0a128dfdfb769c335bc80d1e8e1cc31.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
VirusShare_b0a128dfdfb769c335bc80d1e8e1cc31.exe
Resource
win10v2004-20240508-en
General
-
Target
VirusShare_b0a128dfdfb769c335bc80d1e8e1cc31
-
Size
65KB
-
MD5
b0a128dfdfb769c335bc80d1e8e1cc31
-
SHA1
d663e0bd16da06b9e13f9c4910b179fb290151ac
-
SHA256
1bf05de4f59c24233c0d061320dca44ffff7afc92ebf734f05b3e7dd12d4e5e5
-
SHA512
58861e5bf3d1e5b6f6330009e04243e21b7fd2f4602f44a1c1c8ef5d2ad4ce4ea1d1a2024f809d151519273c6c8b673dad6d9a68e1451292c7b6cd06bad60eb3
-
SSDEEP
1536:cwHzlky+G7+IjAXxe4/ZdX0P4AC7rNRQ9Pj372pvyPxY/:R7Crxe4/ZdX0PB6rNRQ9Pj30B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_b0a128dfdfb769c335bc80d1e8e1cc31
Files
-
VirusShare_b0a128dfdfb769c335bc80d1e8e1cc31.exe windows:8 windows x86 arch:x86
ddc5b6045b349251f7d455987799a195
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCSpnA
StrToInt64ExW
UrlGetPartA
UrlIsW
ord156
UrlIsOpaqueA
PathIsFileSpecW
user32
UnionRect
GetKeyState
kernel32
lstrcpyA
Exports
Exports
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ecmp Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.warz Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ptv Size: 512B - Virtual size: 41B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.warp Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ptr Size: 1024B - Virtual size: 631B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.icmp Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wars Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ