Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_08d2aa597f4ded68db1d15a7a29c0adc.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
VirusShare_08d2aa597f4ded68db1d15a7a29c0adc.exe
Resource
win10v2004-20240508-en
General
-
Target
VirusShare_08d2aa597f4ded68db1d15a7a29c0adc
-
Size
316KB
-
MD5
08d2aa597f4ded68db1d15a7a29c0adc
-
SHA1
bd4cbbfccf4f47656f767ebe473b6d225cc5865e
-
SHA256
c1912debaaa2978d389f5e4a6994c9ad4f5ff1d94a4f0f52dde1a75f92021c21
-
SHA512
6073f284a07ea1d91543b6b520915a33ccca9449458828eb86467104b7e234c31063c9de987f5fdd585a8744b06531a052b00b6ea0358c07caedc2d1bf80b5e6
-
SSDEEP
6144:Y83+tYd7/TNoDtH2zlxTMChh1Er180i6hZW8O4coT:jOtY7raxWzlB3ErG0iBm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_08d2aa597f4ded68db1d15a7a29c0adc
Files
-
VirusShare_08d2aa597f4ded68db1d15a7a29c0adc.exe windows:4 windows x86 arch:x86
b08fabe07579a2bfb1020e0c86c55adf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
IsTokenRestricted
AdjustTokenGroups
GetSecurityDescriptorOwner
kernel32
DosDateTimeToFileTime
HeapCompact
CreateMailslotA
GetDiskFreeSpaceA
GetConsoleScreenBufferInfo
GetSystemDefaultLangID
GetLongPathNameA
GetStringTypeA
GetEnvironmentVariableA
GlobalReAlloc
GetCommandLineA
GetUserDefaultLCID
comdlg32
GetOpenFileNameA
ReplaceTextA
msvcrt
_mbsupr
comctl32
ImageList_LoadImageA
gdi32
MaskBlt
PolyBezierTo
GetWinMetaFileBits
PtVisible
GetWindowExtEx
EndPage
GdiSetBatchLimit
CopyMetaFileW
ChoosePixelFormat
SetColorAdjustment
PolylineTo
GetRgnBox
SaveDC
DeleteDC
SetMetaRgn
CreatePolygonRgn
CreateSolidBrush
CreateFontIndirectW
GetROP2
GetEnhMetaFileDescriptionA
GetBitmapBits
GetCharABCWidthsFloatA
CreateRectRgn
SetDIBColorTable
CreateEllipticRgn
GetBitmapDimensionEx
CloseFigure
SetPixelFormat
CreateBitmapIndirect
GetCharWidthFloatW
SwapBuffers
ScaleViewportExtEx
DescribePixelFormat
ModifyWorldTransform
CreateEnhMetaFileW
StrokePath
CombineRgn
CreateDIBitmap
GetPolyFillMode
CreateDIBPatternBrushPt
GetClipBox
SetGraphicsMode
SetPixel
AddFontResourceA
PatBlt
ExtTextOutW
GetFontData
EnumObjects
DeleteEnhMetaFile
ResetDCW
DPtoLP
SetArcDirection
SetBoundsRect
GetDeviceGammaRamp
SetBitmapBits
StartPage
CreateBitmap
ExtTextOutA
PathToRegion
CreateFontA
GetCharWidthA
PlayMetaFile
GetObjectW
CreateDCW
Escape
SetBkMode
GetGlyphOutlineA
GetAspectRatioFilterEx
EndDoc
CreateDCA
GdiComment
SetColorSpace
CreateHatchBrush
GetICMProfileW
GetEnhMetaFileA
SetAbortProc
Arc
CreateICA
GetNearestColor
SetBitmapDimensionEx
CreateBrushIndirect
Polygon
GetICMProfileA
CopyEnhMetaFileW
Polyline
StartDocA
GetEnhMetaFileBits
CreateCompatibleBitmap
ExtSelectClipRgn
GetViewportExtEx
PolyTextOutA
GetObjectType
GetTextExtentPoint32A
AbortDoc
GetEnhMetaFileDescriptionW
GetTextExtentPoint32W
CreateHalftonePalette
GetCharWidthW
FloodFill
StartDocW
SetPixelV
CreateEnhMetaFileA
DeleteColorSpace
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text3 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ