Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_01a8d99cc288fdff1aca1c4f00704321.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VirusShare_01a8d99cc288fdff1aca1c4f00704321.dll
Resource
win10v2004-20240508-en
General
-
Target
VirusShare_01a8d99cc288fdff1aca1c4f00704321
-
Size
229KB
-
MD5
01a8d99cc288fdff1aca1c4f00704321
-
SHA1
6a09c9bb0347b1497403bbf8b62e65501353b4ff
-
SHA256
9b277590ffedb77e99c06f125c84595eb89076b4ee3b0851025c7c06ca246516
-
SHA512
5b7365aec72734af3acf26f4b5d9ddba745e4280bc61e8af8148460b87a3dca26fe75954c7403594cca8cf62184c190c5756ebdec1f9b51a36147a7f42638d2d
-
SSDEEP
3072:HBJbOp+Q+dK56EPZnlMk6YcMWChxtFZ2H/Ptyo:h5656SZnlsMLHG/lyo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_01a8d99cc288fdff1aca1c4f00704321
Files
-
VirusShare_01a8d99cc288fdff1aca1c4f00704321.dll windows:5 windows x86 arch:x86
a12eaafd4b27cf1f6a98d2322c9f425a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
EnumResourceNamesW
EnumSystemLanguageGroupsA
FindNextVolumeMountPointA
FormatMessageA
GetCurrentThreadId
GetModuleHandleA
GetPrivateProfileStringA
GetShortPathNameA
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetTickCount
GetVersionExA
DeleteFileA
LCMapStringW
MoveFileA
MultiByteToWideChar
OpenFileMappingW
OpenMutexW
PrepareTape
SetLastError
SetThreadAffinityMask
SetThreadPriorityBoost
Thread32Next
WriteFileEx
WriteProfileSectionW
VirtualAllocEx
CreateFileW
lstrcatW
GlobalFindAtomW
GetWindowsDirectoryW
user32
EndPaint
BeginPaint
UpdateWindow
ScrollWindow
SetScrollPos
SetScrollRange
ReleaseDC
GetDC
AppendMenuA
CallMsgFilterW
CallWindowProcW
CascadeWindows
ChangeDisplaySettingsW
CharToOemA
CharUpperW
CheckMenuItem
ChildWindowFromPoint
CloseDesktop
CopyAcceleratorTableA
CopyImage
CopyRect
CreateIconFromResourceEx
CreateMDIWindowA
CreatePopupMenu
DdeClientTransaction
DdeCreateStringHandleW
DdeFreeStringHandle
DdePostAdvise
DdeQueryStringW
DdeSetQualityOfService
DeregisterShellHookWindow
DrawStateA
DrawStateW
EndDialog
PostQuitMessage
EnumChildWindows
GetAltTabInfo
GetAsyncKeyState
GetClassLongW
GetClassNameW
GetClipboardOwner
GetClipboardSequenceNumber
GetComboBoxInfo
GetInputState
GetKeyboardLayout
GetLastActivePopup
GetMenuItemID
GetMessageA
GetProcessWindowStation
GetScrollPos
GetScrollRange
GetSubMenu
GetUpdateRect
GetWindowDC
GetWindowLongW
GetWindowRgn
GetWindowThreadProcessId
GetWindowWord
IMPGetIMEA
IMPQueryIMEA
IMPSetIMEW
InSendMessageEx
InsertMenuItemA
IsCharAlphaNumericW
IsCharUpperW
IsDialogMessageA
LoadKeyboardLayoutW
LockWorkStation
MoveWindow
OemToCharBuffW
OemToCharW
OpenWindowStationA
RealChildWindowFromPoint
RegisterDeviceNotificationW
RemoveMenu
ScrollDC
SendDlgItemMessageA
SendMessageCallbackW
SendMessageW
SendNotifyMessageW
SetClassLongW
SetDlgItemTextW
SetForegroundWindow
SetScrollInfo
SetSysColors
SetWindowWord
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutA
TileWindows
ToAscii
TrackPopupMenuEx
TranslateMessage
UnhookWinEvent
UnhookWindowsHookEx
VkKeyScanA
VkKeyScanExA
WaitForInputIdle
WindowFromDC
DefWindowProcA
LoadIconA
CreateWindowExA
RegisterClassExA
EndMenu
gdi32
GetTextMetricsA
TextOutA
advapi32
RegOpenKeyExA
Sections
.text Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data7 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data6 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data5 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ