e:\dsgasdrhasdh\drhasdh\fhafj.pdb
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_01bd02b422cdc7b9b4dc5036d3ed3550.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VirusShare_01bd02b422cdc7b9b4dc5036d3ed3550.dll
Resource
win10v2004-20240426-en
General
-
Target
VirusShare_01bd02b422cdc7b9b4dc5036d3ed3550
-
Size
156KB
-
MD5
01bd02b422cdc7b9b4dc5036d3ed3550
-
SHA1
a370a9e9715611a96d8545509db41648a557c035
-
SHA256
948b7747a48ded2b32b86ac24d29e0dd2a9bde1518b1062057bd95eddaa944b2
-
SHA512
61e75a037d5fcf2f1590d4aead1d549e5313412e0def10e00fd9e6ec4fdf6423ffaacb48e4612e76f68b408d8d4936f3b0a2296b96a4a590693e95a35df3c831
-
SSDEEP
3072:fHIJUe3t2+AWTzxRVoIypTQmFD9/VmZ9CoR:fze3nnxroZNQmT/Vc9Co
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_01bd02b422cdc7b9b4dc5036d3ed3550
Files
-
VirusShare_01bd02b422cdc7b9b4dc5036d3ed3550.dll windows:4 windows x86 arch:x86
4134746a5d2ee973b0bcfaf374dd63ab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
GetMessagePos
GetWindowPlacement
UpdateWindow
IsWindow
GetDC
UnionRect
GetWindowLongA
GetKeyNameTextA
RegisterWindowMessageA
CreateDialogIndirectParamA
GetDlgCtrlID
GetMessageA
SetRectEmpty
GetWindow
GetNextDlgGroupItem
GetSubMenu
GetAltTabInfoW
gdi32
GetTextCharsetInfo
CreateFontIndirectA
StretchBlt
DeleteObject
CreatePolygonRgn
SetBkMode
kernel32
GetLastError
HeapAlloc
LocalReAlloc
GetFileSize
GetModuleFileNameW
VirtualQuery
GetCurrentProcessId
GetThreadLocale
GetOEMCP
GetFileAttributesA
GetStdHandle
InterlockedExchange
InterlockedCompareExchange
msvcrt
rand
advapi32
RegSetValueExA
Exports
Exports
dgjhxsdthjxd
lVcXLmBev
zXRjItLmmf
Sections
.text Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ