Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_3aa0ba04c52f729cda635b867eed2468.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
VirusShare_3aa0ba04c52f729cda635b867eed2468.exe
Resource
win10v2004-20240426-en
General
-
Target
VirusShare_3aa0ba04c52f729cda635b867eed2468
-
Size
116KB
-
MD5
3aa0ba04c52f729cda635b867eed2468
-
SHA1
d4434a9bdcbd6d6cdcfb4b73ed98e9cfb6600cfd
-
SHA256
2654b37d71122012ef6e6e463ebcbc5a70b08f2b8c5d37393f300e79d7d7b9e2
-
SHA512
1b7b0ec71ad5ad8e628f44726265663e61040fd2dc2be040f5880bf264acab233f170f280dfbf5cf929f0e22dc580ecb26c9f36bdcef21545f425be1e9906273
-
SSDEEP
3072:r59Plk68EldamDmPoDkf3hmXilti/OgZmtr3xWg4DP2:r5ljlMmKTfsXlOgwt7xWg46
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_3aa0ba04c52f729cda635b867eed2468
Files
-
VirusShare_3aa0ba04c52f729cda635b867eed2468.exe windows:4 windows x86 arch:x86
7413fbbc45ec16f965db96f87597605e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
EndPage
SaveDC
CreateCompatibleBitmap
GetObjectW
MoveToEx
CreateFontW
CreateBitmap
SetAbortProc
GetRgnBox
DeleteEnhMetaFile
StartPage
RestoreDC
GetSystemPaletteEntries
RectVisible
GetPixel
SetTextAlign
DPtoLP
GetEnhMetaFilePaletteEntries
SetMapMode
CreateICA
SetRectRgn
GetClipRgn
SetWorldTransform
GetTextExtentPoint32A
CreateCompatibleDC
GetCharWidthA
OffsetViewportOrgEx
SetWinMetaFileBits
Pie
CopyEnhMetaFileW
EndDoc
ExtEscape
Polyline
CreateFontA
GetWindowOrgEx
GetStockObject
EndPath
GetClipBox
ExtCreatePen
PtVisible
CreateDIBPatternBrushPt
SetPixel
SetBkColor
GetObjectA
SetPolyFillMode
OffsetRgn
GetTextColor
GetDIBColorTable
SetViewportOrgEx
GetTextCharsetInfo
ExtSelectClipRgn
GetTextAlign
StretchBlt
EnumFontFamiliesExW
OffsetClipRgn
SelectClipRgn
GetDeviceCaps
CreatePenIndirect
CreateDCA
GdiFlush
GetBitmapBits
GetTextFaceA
IntersectClipRect
SetROP2
GetTextMetricsA
GetNearestPaletteIndex
ScaleViewportExtEx
CloseEnhMetaFile
SetTextColor
SetTextCharacterExtra
GetWinMetaFileBits
Ellipse
SetWindowExtEx
SetBkMode
FillRgn
GetBrushOrgEx
PolyBezierTo
BeginPath
advapi32
CopySid
RegCreateKeyExA
RegQueryInfoKeyW
RegEnumKeyW
SetSecurityDescriptorOwner
RegUnLoadKeyW
OpenSCManagerA
GetKernelObjectSecurity
AddAce
LsaQueryInformationPolicy
RegisterEventSourceA
SetSecurityDescriptorSacl
RegQueryValueA
RegCreateKeyA
ReportEventA
RegOpenKeyExA
OpenSCManagerW
RegEnumKeyExA
CreateServiceW
CloseServiceHandle
InitializeSecurityDescriptor
user32
OemToCharBuffA
ShowCursor
GetClassNameA
GetForegroundWindow
LoadCursorA
MapVirtualKeyExW
GetClipboardData
GetWindowLongA
IsCharAlphaW
LoadBitmapW
SetWindowTextA
CopyImage
WinHelpA
GetDC
LoadMenuW
CopyAcceleratorTableW
SetKeyboardState
GetSystemMetrics
SetActiveWindow
CharLowerW
EnableWindow
CloseDesktop
SetClassLongA
SetCursor
GetMessageA
GetSysColorBrush
IsWindowVisible
GetWindow
CharPrevW
SendInput
kernel32
LCMapStringA
CreateDirectoryA
wininet
InternetConfirmZoneCrossing
FtpSetCurrentDirectoryW
InternetOpenUrlW
InternetTimeFromSystemTime
FtpFindFirstFileW
InternetOpenA
InternetCrackUrlA
GetUrlCacheEntryInfoExA
FindFirstUrlCacheEntryExW
InternetConnectW
InternetCreateUrlW
HttpQueryInfoA
InternetCheckConnectionW
InternetSetFilePointer
InternetErrorDlg
FindFirstUrlCacheEntryA
FtpCreateDirectoryA
HttpAddRequestHeadersA
GopherGetLocatorTypeW
GopherGetAttributeW
InternetReadFile
FtpOpenFileA
InternetGetConnectedState
HttpSendRequestExW
RetrieveUrlCacheEntryFileW
InternetConnectA
GopherFindFirstFileW
FtpRenameFileW
FindNextUrlCacheEntryExA
GetUrlCacheEntryInfoA
FtpOpenFileW
InternetSetStatusCallback
RetrieveUrlCacheEntryFileA
InternetCheckConnectionA
GetUrlCacheEntryInfoExW
FtpRenameFileA
CreateUrlCacheEntryA
InternetDial
HttpSendRequestExA
InternetCrackUrlW
HttpSendRequestW
InternetCombineUrlW
SetUrlCacheEntryInfoA
InternetGoOnline
shlwapi
PathIsDirectoryA
PathIsContentTypeW
StrSpnW
PathGetCharTypeW
PathStripPathA
StrPBrkW
PathIsSameRootW
PathRenameExtensionA
PathAppendW
ChrCmpIW
PathGetDriveNumberA
SHSetValueW
PathRemoveBackslashA
PathRemoveExtensionW
SHDeleteKeyA
SHRegGetBoolUSValueW
SHDeleteEmptyKeyW
StrDupA
PathRemoveFileSpecW
SHRegWriteUSValueW
SHRegCloseUSKey
StrFormatByteSizeW
PathIsUNCServerShareW
PathCombineA
StrCmpW
PathCompactPathW
PathFindOnPathA
PathCommonPrefixW
PathIsPrefixA
PathIsUNCW
SHQueryInfoKeyW
SHGetValueA
PathSkipRootA
PathSetDlgItemPathW
PathUnquoteSpacesA
PathIsFileSpecA
SHRegEnumUSValueW
SHDeleteEmptyKeyA
PathRenameExtensionW
PathCompactPathExA
StrTrimA
StrCSpnW
SHRegSetUSValueW
PathGetArgsA
PathIsRelativeA
PathFindNextComponentA
StrToIntExA
PathAddExtensionA
StrToIntExW
PathStripToRootW
PathBuildRootW
PathParseIconLocationW
PathFindExtensionW
StrCpyW
PathIsRootW
PathRemoveArgsW
SHRegDeleteUSValueW
SHRegGetBoolUSValueA
StrNCatA
StrToIntA
PathIsSameRootA
PathRemoveBlanksA
SHRegOpenUSKeyW
PathAddBackslashW
PathGetDriveNumberW
PathFindFileNameA
PathAddBackslashA
SHEnumKeyExA
StrCatW
PathRemoveExtensionA
SHRegDeleteEmptyUSKeyW
PathIsUNCServerShareA
PathFindExtensionA
PathIsPrefixW
SHQueryValueExW
PathQuoteSpacesW
PathMakePrettyW
PathMatchSpecA
PathCanonicalizeW
StrToIntW
PathStripToRootA
SHRegCreateUSKeyW
SHEnumKeyExW
SHEnumValueW
PathCompactPathExW
StrFromTimeIntervalW
PathRemoveFileSpecA
PathBuildRootA
SHDeleteKeyW
PathFindOnPathW
PathParseIconLocationA
PathRemoveBackslashW
PathCombineW
StrCSpnA
StrTrimW
PathMakeSystemFolderW
PathCommonPrefixA
PathMatchSpecW
SHRegQueryUSValueW
PathQuoteSpacesA
PathIsURLA
PathIsRelativeW
PathAppendA
StrSpnA
StrFormatByteSizeA
SHGetValueW
SHSetValueA
PathIsUNCServerW
PathIsSystemFolderW
PathIsUNCA
Sections
.text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ