meqbloom1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_1d9afa8a7970af28631bd71f73488b1d.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VirusShare_1d9afa8a7970af28631bd71f73488b1d.dll
Resource
win10v2004-20240508-en
General
-
Target
VirusShare_1d9afa8a7970af28631bd71f73488b1d
-
Size
232KB
-
MD5
1d9afa8a7970af28631bd71f73488b1d
-
SHA1
e3909331d09237e3719cc37961030c68e8c81114
-
SHA256
8e622fbdfa6f31383b5de25e1fb9c9a995d26be2a9d54585abde88870dd326db
-
SHA512
d6a4460497bd94c4fb0ed8d14d2cadacd5fc981d2b86e785674abc0969c8bbd06a6591d724680c564789b17b563e8bb03d5d3472330f39c836bf02b8790da37e
-
SSDEEP
3072:uWOjx9MXeJkLQ54sn+kQK7UKEPwhc1xnJ53+pI:uLjx9MOJaQ5gk9EPPR3EI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_1d9afa8a7970af28631bd71f73488b1d
Files
-
VirusShare_1d9afa8a7970af28631bd71f73488b1d.dll windows:4 windows x86 arch:x86
095a65e4c466e198d1e6ffebe682c2c8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
UnhandledExceptionFilter
IsValidLanguageGroup
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
user32
ReplyMessage
SetActiveWindow
SetCursor
SetFocus
SetWindowPos
MessageBeep
CharLowerA
OpenClipboard
RegisterClassA
MessageBoxA
IsZoomed
SetCapture
SetScrollInfo
BeginPaint
AnimateWindow
ChangeMenuA
CharPrevA
CharToOemA
CreateDesktopA
CloseDesktop
gdi32
CreateDIBitmap
CreateCompatibleDC
GetSystemPaletteEntries
GetNearestColor
GetObjectA
GetDeviceCaps
CreateDCA
GetRegionData
DeleteObject
GetRandomRgn
CreateRectRgn
GetDIBits
CreateCompatibleBitmap
GetDeviceGammaRamp
StretchBlt
SetStretchBltMode
BitBlt
DeleteDC
advapi32
SetFileSecurityA
OpenEventLogA
IsValidSid
SetThreadToken
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Exports
Exports
VeAdjustScreenHeight
Sections
.text Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: 1024B - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ