Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_0c9256704d5435ded461020b0dae6425.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
VirusShare_0c9256704d5435ded461020b0dae6425.dll
Resource
win10v2004-20240508-en
General
-
Target
VirusShare_0c9256704d5435ded461020b0dae6425
-
Size
196KB
-
MD5
0c9256704d5435ded461020b0dae6425
-
SHA1
45b2ec8fc3ad20a7dccc3826ddd3e576650ec014
-
SHA256
dc6338ebfdc25bcc2174757cec46f5fcb9e9b0f9a858ba0dfccc206c8f148617
-
SHA512
805c88ab1f3193dc42b5970a8f37093846378867a9285bcb6ea7e5434910e4ee88eb3f5b2d84ab09d9a31723aaa5c62c458f539c34ff46847e398b4608dac91c
-
SSDEEP
3072:t2w34Ara9fgIMW/l/k8y96mv2VhZ74HOM6geGc14:/I7ld/lsZ6meJ4OM1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_0c9256704d5435ded461020b0dae6425
Files
-
VirusShare_0c9256704d5435ded461020b0dae6425.dll windows:5 windows x86 arch:x86
60cff83698fa6e6fe7fdd2fc937daa1c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualAllocEx
GetWindowsDirectoryW
lstrcatW
CloseHandle
CreateFileW
user32
EndPaint
BeginPaint
PostQuitMessage
DefWindowProcA
LoadIconA
gdi32
DPtoLP
DeleteColorSpace
DeviceCapabilitiesExW
EngAcquireSemaphore
EngCheckAbort
EngCreateDeviceBitmap
EngFindResource
EngGradientFill
EngReleaseSemaphore
FONTOBJ_pxoGetXform
FrameRgn
GdiComment
GdiConvertEnhMetaFile
GdiCreateLocalEnhMetaFile
GdiEntry11
CreateDiscardableBitmap
GdiSetServerAttr
GdiSwapBuffers
GetBoundsRect
GetCharWidthA
GetColorAdjustment
GetEnhMetaFilePaletteEntries
GetFontLanguageInfo
GetFontUnicodeRanges
GetMapMode
GetObjectA
GetPolyFillMode
CopyEnhMetaFileW
GetStretchBltMode
LPtoDP
LineTo
OffsetRgn
PolyBezier
PolyDraw
PtVisible
RemoveFontResourceExW
SetBrushOrgEx
SetEnhMetaFileBits
SetFontEnumeration
SetPolyFillMode
SetTextCharacterExtra
SetViewportOrgEx
CloseEnhMetaFile
CLIPOBJ_ppoGetPath
GdiEntry2
GetROP2
comdlg32
GetFileTitleA
FindTextA
GetSaveFileNameA
GetSaveFileNameW
PageSetupDlgA
PageSetupDlgW
PrintDlgW
PrintDlgA
ChooseFontA
ChooseColorA
CommDlgExtendedError
ChooseFontW
advapi32
RegOpenKeyExW
RegOpenKeyW
msvcrt
_cexit
_fdopen
_spawnl
_stat
_strdup
_sys_errlist
_timezone
_wgetdcwd
atexit
ctime
setlocale
Sections
.text Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ