Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_2ceb12e65dfa9a79013c08f361752878.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VirusShare_2ceb12e65dfa9a79013c08f361752878.exe
Resource
win10v2004-20240426-en
General
-
Target
VirusShare_2ceb12e65dfa9a79013c08f361752878
-
Size
1.9MB
-
MD5
2ceb12e65dfa9a79013c08f361752878
-
SHA1
0253c9372a96933d1574c48156c9c3902ffdb3d7
-
SHA256
bba7c7a9a51eb230c4c988fd3441f924d695437c5f112371da4e540f62be9436
-
SHA512
0a3e62f252e4df9dec3e648417d78f258b2ecbba561e017c18e03f3711898a464f7edf560945a772bb3e45484a79654079fba4f9cdf020205e2503903af19ec4
-
SSDEEP
49152:s1vqjdC8PDgqLX0Ca7DzsALTep4/4UA4CgBQ:s1vqj7DgqT4jskbM4Q
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_2ceb12e65dfa9a79013c08f361752878 -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_2
Files
-
VirusShare_2ceb12e65dfa9a79013c08f361752878.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ