D:\data\src\m3-for-merc-1\build\release\obj\src\loader\loader.pdb
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_1b8c4eaecbb92829c9f315b429a78b10.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
VirusShare_1b8c4eaecbb92829c9f315b429a78b10.dll
Resource
win10v2004-20240426-en
General
-
Target
VirusShare_1b8c4eaecbb92829c9f315b429a78b10
-
Size
142KB
-
MD5
1b8c4eaecbb92829c9f315b429a78b10
-
SHA1
0cfbf009600a3c0683024f9067202d0578ead3b5
-
SHA256
2d445c51708110f4841a5ff92473cc75d8bf3ed23052f32d3f7308672e6fa1b2
-
SHA512
271a836c237272e15336b769e956e10f80ae085a3c931fb394baa4215bedc06f6ff04ee15307e4e401946560af268f24524815da308cfd6ac9ba34b1e7061843
-
SSDEEP
1536:KKtFPcAElkpbi5bbU0C2bLHhnw7beT5PSUQxmVGm2Ngw7X:KKfskpbi5bbU0zHhMqT9ZMLNgw7X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_1b8c4eaecbb92829c9f315b429a78b10
Files
-
VirusShare_1b8c4eaecbb92829c9f315b429a78b10.dll windows:4 windows x86 arch:x86
7b2af642dbbd83b09e841cfdc3856737
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
strerror
kernel32
SetStdHandle
FreeConsole
LocalAlloc
GetConsoleMode
GetConsoleScreenBufferInfo
SetHandleCount
SetFilePointer
GetFileType
FlushFileBuffers
GetLocaleInfoW
GetLocaleInfoA
GetOEMCP
GetACP
Exports
Exports
bntyjdljopd
xvdsedsfdf
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1006B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ