Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_1bdb9314e050e1e9acb0c8620840d634.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VirusShare_1bdb9314e050e1e9acb0c8620840d634.dll
Resource
win10v2004-20240226-en
General
-
Target
VirusShare_1bdb9314e050e1e9acb0c8620840d634
-
Size
199KB
-
MD5
1bdb9314e050e1e9acb0c8620840d634
-
SHA1
6fb5fe35ef279ea4ba323372dcca6fa84448f61b
-
SHA256
b8b9808c21eddb923989da13420132426d5f26f86bfb32d845b1abfcb82e3f01
-
SHA512
3024b0a05fa23ad82d0c3a4690c6acfc4aee0e1bb02f052d59f011a879b72bbe34a0e0681399cf530aa6f909bfba3210442c8b52eef369d5c68d0f1d596c5179
-
SSDEEP
3072:rPxhOPmNAwO8dlYNB1aemZyghamzfB1HH2ZC1TTF/DFV9jc1o:LCwhdlUQemZNamLQC1TT5DF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_1bdb9314e050e1e9acb0c8620840d634
Files
-
VirusShare_1bdb9314e050e1e9acb0c8620840d634.dll windows:5 windows x86 arch:x86
472550cc76be68d4ecf24a940c5c5c87
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualAllocEx
GetWindowsDirectoryW
lstrcatW
CloseHandle
CreateFileW
user32
BeginPaint
EndPaint
PostQuitMessage
DefWindowProcA
LoadIconA
gdi32
DPtoLP
DeleteColorSpace
DeviceCapabilitiesExW
EnableEUDC
EndDoc
EngAcquireSemaphore
EngCheckAbort
EngCreateClip
EngCreateDeviceBitmap
EngCreateDeviceSurface
EngCreatePalette
EngDeletePath
EngFindResource
EngGetDriverName
EngGradientFill
EngQueryLocalTime
EngReleaseSemaphore
EngTextOut
EnumEnhMetaFile
EudcLoadLinkW
FONTOBJ_cGetGlyphs
FONTOBJ_pxoGetXform
FrameRgn
GdiComment
GdiConvertEnhMetaFile
GdiConvertMetaFilePict
GdiCreateLocalEnhMetaFile
GdiEntry11
GdiEntry2
GdiGetBatchLimit
GdiGetPageHandle
GdiInitializeLanguagePack
GdiPlayDCScript
GdiPlayJournal
GdiSetBatchLimit
GdiSetServerAttr
GdiSwapBuffers
CreatePolygonRgn
GetCharWidthA
GetColorAdjustment
GetEnhMetaFileDescriptionA
GetEnhMetaFileDescriptionW
GetEnhMetaFilePaletteEntries
GetFontData
GetFontLanguageInfo
GetFontUnicodeRanges
GetMapMode
GetMiterLimit
GetObjectA
GetPolyFillMode
GetROP2
GetStretchBltMode
HT_Get8BPPFormatPalette
InvertRgn
LPtoDP
LineTo
OffsetRgn
PATHOBJ_vEnumStart
PlayEnhMetaFileRecord
PolyBezier
PolyDraw
PolyPolyline
PolyTextOutW
PtVisible
RemoveFontResourceExW
ScaleViewportExtEx
SelectClipRgn
SetBrushOrgEx
SetEnhMetaFileBits
SetFontEnumeration
SetMapperFlags
SetPixelFormat
SetPixelV
SetPolyFillMode
SetSystemPaletteUse
SetTextAlign
SetTextCharacterExtra
SetViewportOrgEx
XLATEOBJ_cGetPalette
CreatePolyPolygonRgn
CreateICW
CreateFontIndirectExA
CreateDiscardableBitmap
CreateDIBitmap
CreateDCW
CreateCompatibleDC
AnimatePalette
CopyMetaFileW
CopyEnhMetaFileW
CloseEnhMetaFile
CLIPOBJ_ppoGetPath
GetBoundsRect
comdlg32
PageSetupDlgW
PageSetupDlgA
PrintDlgA
PrintDlgExA
PrintDlgExW
GetFileTitleA
ReplaceTextW
ReplaceTextA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW
FindTextW
FindTextA
CommDlgExtendedError
ChooseFontW
ChooseFontA
ChooseColorW
ChooseColorA
PrintDlgW
advapi32
RegOpenKeyExW
RegOpenKeyW
msvcrt
_CIatan
_EH_prolog
_Getdays
_XcptFilter
__RTDynamicCast
__RTtypeid
__argv
__p___argc
__p__amblksiz
__p__dstbias
__p__pctype
__unDNameEx
_adj_fdivr_m32
_adj_fdivr_m32i
_atoi64
_beginthreadex
_cexit
_clearfp
_environ
_execl
_fdopen
_filbuf
_findfirst
_findfirsti64
_findnexti64
_fsopen
_ftime64
_gmtime64
_initterm
_ismbbgraph
_ismbbpunct
_ismbcalnum
_itoa
_ltow
_mbsnbcmp
_mbsnicmp
_mbsninc
_mbsspnp
_onexit
_spawnl
_spawnlp
_stat
_strdup
_strtime
_sys_errlist
_tell
_timezone
_unlock
_waccess
_wcmdln
_wcsdup
_wcsncoll
_wenviron
_wfdopen
_wfreopen
_wgetdcwd
_wmktemp
_wperror
_wpgmptr
_wstati64
_wstrtime
_wsystem
_wtempnam
_wtmpnam
_wtoi64
_yn
acos
atexit
atof
ctime
ferror
fgetwc
fputs
fputws
freopen
getc
getenv
gmtime
isleadbyte
iswprint
iswxdigit
labs
printf
rand
setlocale
signal
sscanf
strchr
strtoul
swscanf
tanh
time
tmpfile
wprintf
Sections
.text Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ