uLYQFwZyr
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_0a493b94f1458ff7d2f151d46abcc64d.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
VirusShare_0a493b94f1458ff7d2f151d46abcc64d.dll
Resource
win10v2004-20240426-en
General
-
Target
VirusShare_0a493b94f1458ff7d2f151d46abcc64d
-
Size
112KB
-
MD5
0a493b94f1458ff7d2f151d46abcc64d
-
SHA1
f65eb34f7c9ae15a5c3d22ee3b492c65dd1041be
-
SHA256
5e4301d636892c4a1352bae77e30f0df64f814beded5dd65f948229581f2255a
-
SHA512
677f9c40b7e8d07a427be78c9b759f25bfbdd386d23d1f445a8c48055161b89ae57c7de4db7548d6747c8f07c03912e0ff6527b294ab1a37fd940ac2bb8cd370
-
SSDEEP
3072:+x5ULloPCxo6JjLAHELQAkVOgcQwVmwAwFdR:+x6Z+CL0Epk4gcQ9wF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_0a493b94f1458ff7d2f151d46abcc64d
Files
-
VirusShare_0a493b94f1458ff7d2f151d46abcc64d.dll windows:4 windows x86 arch:x86
930bd9a7e591f0c21241271489994f1e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
GetLocaleInfoW
LoadResource
FindResourceA
SetEnvironmentVariableA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
RtlUnwind
SetStdHandle
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
UnhandledExceptionFilter
HeapAlloc
FatalAppExitA
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleHandleA
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
ExitProcess
GetCommandLineA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
CompareStringA
CompareStringW
GetLocalTime
WriteFile
GetTempPathA
GetTempFileNameA
CreateFileA
OpenFileMappingA
MapViewOfFile
WaitForMultipleObjects
OpenEventA
WaitForSingleObject
SetEvent
ResetEvent
ReleaseMutex
UnmapViewOfFile
IsBadWritePtr
GetModuleFileNameA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
IsBadReadPtr
GetWindowsDirectoryA
GetVersion
CreateProcessA
GetVersionExA
OpenMutexA
Sleep
CloseHandle
OutputDebugStringA
DisableThreadLibraryCalls
user32
FindWindowA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ