Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_1eb412a5f6400eb490a8698dc08129da.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
VirusShare_1eb412a5f6400eb490a8698dc08129da.exe
Resource
win10v2004-20240226-en
General
-
Target
VirusShare_1eb412a5f6400eb490a8698dc08129da
-
Size
344KB
-
MD5
1eb412a5f6400eb490a8698dc08129da
-
SHA1
065daf13ce7d8adfca48fb1405f76b122b5edd62
-
SHA256
a38207f0e70d472afbbde057caa046c47c56d86d02b3c2a633a2e08f02e7274a
-
SHA512
7155af1756cd1639b9d7baf96caad6f658d28cd64723755dae657adb156fbb9cc107cecc68c376dd2c0bcdc532aef6233c00418e91fa9f35728d4c759daa5c70
-
SSDEEP
6144:fclgBCoMvJpr3IZVXBRVRC3BMaXGRTuKYAyqeT6y52cZuvrvD1hNVWfO6:f5C9Jpr3I3XBRi3WaXGEKXnW6RjPkv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_1eb412a5f6400eb490a8698dc08129da
Files
-
VirusShare_1eb412a5f6400eb490a8698dc08129da.exe windows:4 windows x86 arch:x86
3a56470265bf473157bab3e8cee142ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
netapi32
NetServerEnum
msvcrt
_memccpy
oleaut32
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserSize
comdlg32
PrintDlgA
user32
SubtractRect
CharNextW
SwitchDesktop
EnumClipboardFormats
FindWindowW
IMPQueryIMEW
ToUnicode
AdjustWindowRect
GetPropA
SetKeyboardState
LoadMenuIndirectW
DefFrameProcW
CreateDialogParamA
SetWindowTextW
ModifyMenuA
DeleteMenu
GetClipboardFormatNameA
PostMessageA
MoveWindow
GetMessageTime
CreateMDIWindowA
GetClipboardViewer
IsWindowVisible
DrawTextW
DestroyCursor
UnregisterClassA
OpenIcon
ShowCursor
CallMsgFilterA
GetIconInfo
GetClassInfoExW
ScrollWindow
CreateWindowExA
GetDlgCtrlID
GetTabbedTextExtentW
IsClipboardFormatAvailable
FlashWindow
BringWindowToTop
GetKBCodePage
CreateWindowStationA
PtInRect
CharToOemW
ArrangeIconicWindows
MessageBoxExW
AttachThreadInput
NotifyWinEvent
VkKeyScanExW
IsDlgButtonChecked
DdeGetData
SendMessageCallbackW
MapVirtualKeyA
EmptyClipboard
CharToOemBuffA
InsertMenuA
EnableMenuItem
DialogBoxParamW
GetMessageA
SetDlgItemTextW
ClientToScreen
FreeDDElParam
GetMenuDefaultItem
SetClassLongA
SetCaretPos
EnumDisplaySettingsW
GetWindowTextLengthA
GetMessagePos
IsCharLowerW
CreateWindowStationW
GetScrollInfo
CreateIconFromResourceEx
SetPropA
InSendMessage
EnumDesktopWindows
ScrollWindowEx
SetScrollRange
GetGUIThreadInfo
GetUserObjectInformationW
TrackPopupMenuEx
SetWindowTextA
EnumThreadWindows
MessageBeep
GetMenuContextHelpId
AppendMenuA
IsIconic
CascadeWindows
HiliteMenuItem
SetMenuItemInfoW
CreateIconIndirect
GetClassLongA
keybd_event
SetClassLongW
GetUpdateRgn
SetClipboardViewer
SetMenu
DdeClientTransaction
DispatchMessageW
GetNextDlgTabItem
SetUserObjectInformationA
PostQuitMessage
ToAsciiEx
GetCaretPos
GetMenuItemRect
SetWindowRgn
IsWindowEnabled
GetUserObjectSecurity
DdeImpersonateClient
ModifyMenuW
MsgWaitForMultipleObjects
DlgDirListComboBoxW
SendMessageW
GetMessageW
DestroyAcceleratorTable
ChildWindowFromPoint
LoadCursorFromFileA
LookupIconIdFromDirectoryEx
SetUserObjectInformationW
IMPSetIMEW
DrawEdge
CheckMenuRadioItem
ImpersonateDdeClientWindow
SendNotifyMessageA
CharLowerBuffA
SendNotifyMessageW
CreateIconFromResource
ShowOwnedPopups
DialogBoxIndirectParamA
ReuseDDElParam
TranslateAcceleratorW
SetRectEmpty
SetCapture
LoadBitmapA
DlgDirListW
CharUpperBuffW
MapVirtualKeyExA
CreateWindowExW
CopyImage
GetProcessWindowStation
LoadStringW
ExcludeUpdateRgn
GetKeyboardType
OpenDesktopA
DragDetect
UpdateWindow
PostThreadMessageA
IsMenu
EnumDesktopsW
CreateMDIWindowW
DdeDisconnect
GetWindow
SetThreadDesktop
PackDDElParam
CharLowerW
GetScrollRange
CharLowerBuffW
ValidateRect
mouse_event
AnyPopup
UnhookWindowsHook
IsZoomed
DestroyCaret
GetAsyncKeyState
DdeCreateStringHandleW
UnionRect
DestroyMenu
RegisterClipboardFormatA
FindWindowA
SetWindowContextHelpId
GetWindowDC
InsertMenuW
GetSysColorBrush
DdeQueryNextServer
GetSystemMetrics
SetSysColors
CopyIcon
ClipCursor
EndDialog
CharPrevExA
OpenWindowStationA
LoadMenuW
ChangeMenuA
GetDlgItemTextA
IsChild
UnpackDDElParam
RedrawWindow
SetFocus
DdeAccessData
MessageBoxA
EnableWindow
PostThreadMessageW
GetMenuState
ScrollDC
GetClientRect
SystemParametersInfoA
RegisterClipboardFormatW
ValidateRgn
CharLowerA
PeekMessageA
DdeCreateStringHandleA
GetOpenClipboardWindow
ChangeClipboardChain
SetDoubleClickTime
CharUpperW
CharToOemBuffW
AppendMenuW
ExitWindowsEx
CallWindowProcA
GetTopWindow
SetWinEventHook
SendDlgItemMessageA
GetMenuItemCount
DrawStateW
MapVirtualKeyExW
CallNextHookEx
wvsprintfW
IsRectEmpty
TranslateAcceleratorA
LoadMenuA
GetClassInfoA
MessageBoxW
PostMessageW
CloseWindowStation
SetDlgItemTextA
LoadImageW
GetDesktopWindow
SendIMEMessageExW
SetWindowLongW
DrawMenuBar
GrayStringA
ChildWindowFromPointEx
OpenInputDesktop
WindowFromDC
ScreenToClient
GetWindowTextA
DdeUnaccessData
DdeQueryStringA
InvalidateRgn
IsDialogMessageA
GetPriorityClipboardFormat
LoadAcceleratorsA
LoadCursorW
ChangeDisplaySettingsExW
DialogBoxIndirectParamW
GetInputState
CloseDesktop
DefMDIChildProcW
gdi32
GetRasterizerCaps
CreateColorSpaceA
SetWinMetaFileBits
CreateBrushIndirect
CreateMetaFileA
CreateDCA
OffsetRgn
SetTextJustification
CreateScalableFontResourceA
CreateHatchBrush
PlayEnhMetaFile
AnimatePalette
PlayMetaFileRecord
SetRectRgn
SetPixel
SetTextCharacterExtra
ExtCreatePen
GetMiterLimit
GetLogColorSpaceW
FixBrushOrgEx
Arc
CreateRoundRectRgn
CreatePatternBrush
CheckColorsInGamut
GetCharWidthW
CreatePalette
GetWorldTransform
GetEnhMetaFileHeader
CreateICW
EnumMetaFile
GetEnhMetaFileW
PlayMetaFile
GetTextExtentExPointW
GetTextColor
GetICMProfileW
CopyMetaFileW
GetMetaFileA
GetArcDirection
StartDocW
SetBkMode
WidenPath
CombineRgn
SetTextAlign
AbortPath
GetEnhMetaFileDescriptionA
Pie
SetViewportOrgEx
ScaleViewportExtEx
GetFontData
PolyBezier
ModifyWorldTransform
CreateCompatibleBitmap
PolyBezierTo
GetColorAdjustment
GetWindowOrgEx
FillPath
ChoosePixelFormat
GetClipRgn
GetPolyFillMode
ExtSelectClipRgn
GetDeviceCaps
DeleteDC
SetROP2
GdiSetBatchLimit
CreateDIBPatternBrushPt
CreateEllipticRgnIndirect
GetLogColorSpaceA
StretchBlt
CopyEnhMetaFileW
MoveToEx
RectVisible
GetTextExtentPointA
CreateCompatibleDC
GetEnhMetaFileBits
GetStockObject
EndPage
CreateDIBPatternBrush
CloseFigure
SaveDC
FloodFill
StrokeAndFillPath
GetCharABCWidthsFloatW
EnumEnhMetaFile
TranslateCharsetInfo
GetSystemPaletteUse
PtVisible
DescribePixelFormat
GetDIBits
LineDDA
CombineTransform
RealizePalette
GdiFlush
PolyPolyline
GetDeviceGammaRamp
GetBitmapDimensionEx
CreatePolygonRgn
CreateEllipticRgn
CloseEnhMetaFile
CreateBitmap
DeleteColorSpace
ColorMatchToTarget
SelectPalette
StrokePath
GetPixelFormat
SetAbortProc
CreatePen
CreateFontIndirectA
GetRgnBox
GdiGetBatchLimit
GetBoundsRect
PaintRgn
EnumFontsA
CreateRectRgnIndirect
SetDIBitsToDevice
CreateMetaFileW
Escape
GetCharWidthA
GetTextCharsetInfo
GetWinMetaFileBits
CreateEnhMetaFileW
SetPolyFillMode
ScaleWindowExtEx
OffsetWindowOrgEx
ResetDCW
CopyEnhMetaFileA
GetNearestPaletteIndex
UnrealizeObject
EnumICMProfilesA
LineTo
CreateColorSpaceW
SetGraphicsMode
PlayEnhMetaFileRecord
SetMapMode
GetRegionData
SetWindowOrgEx
GetCharacterPlacementA
CreateRectRgn
GdiComment
AbortDoc
ExcludeClipRect
Chord
IntersectClipRect
AddFontResourceA
GetTextFaceA
GetBrushOrgEx
GetPixel
GetViewportExtEx
SelectClipRgn
GetObjectW
DeleteMetaFile
GetDIBColorTable
GetMetaFileBitsEx
GetOutlineTextMetricsA
Rectangle
PolyTextOutA
GetGlyphOutlineA
SetMetaFileBitsEx
GetGraphicsMode
GetEnhMetaFileA
CreateFontW
GetTextCharset
RemoveFontResourceW
DPtoLP
FillRgn
GetTextAlign
ExtEscape
GetCharWidth32A
EnumFontFamiliesExW
GetCharWidth32W
GetGlyphOutlineW
CreateICA
PolyDraw
SetColorAdjustment
advapi32
LsaEnumerateTrustedDomainsEx
LsaLookupSids
SetNamedSecurityInfoA
GetSidSubAuthority
GetNumberOfEventLogRecords
SetSecurityDescriptorGroup
GetSecurityDescriptorDacl
LsaCreateTrustedDomainEx
RegNotifyChangeKeyValue
ObjectCloseAuditAlarmA
ClearEventLogA
SetTokenInformation
AccessCheck
IsValidSecurityDescriptor
AreAnyAccessesGranted
CreateProcessAsUserA
GetNamedSecurityInfoW
RegEnumValueA
RegQueryValueA
RegEnumKeyExW
AllocateLocallyUniqueId
ReadEventLogA
BuildTrusteeWithNameW
ObjectPrivilegeAuditAlarmA
LsaEnumerateAccountRights
IsValidSid
SetEntriesInAclA
LsaSetDomainInformationPolicy
IsTokenRestricted
OpenBackupEventLogW
CopySid
AreAllAccessesGranted
SetFileSecurityA
BuildExplicitAccessWithNameW
SetSecurityInfo
GetAclInformation
OpenEventLogW
LsaNtStatusToWinError
CreateRestrictedToken
RegDeleteValueA
OpenBackupEventLogA
LookupPrivilegeNameA
RegQueryValueExA
BuildTrusteeWithSidW
LookupPrivilegeNameW
AdjustTokenPrivileges
AdjustTokenGroups
RegSaveKeyA
RegUnLoadKeyW
SetSecurityDescriptorOwner
GetExplicitEntriesFromAclA
GetTrusteeNameW
RegisterEventSourceA
MakeAbsoluteSD
RegOpenKeyW
MakeSelfRelativeSD
LookupPrivilegeDisplayNameA
AddAce
ReadEventLogW
GetSidLengthRequired
RegDeleteValueW
RegQueryMultipleValuesW
BuildImpersonateTrusteeW
ClearEventLogW
SetThreadToken
RegDeleteKeyW
GetSecurityDescriptorSacl
EncryptFileW
ImpersonateNamedPipeClient
RegConnectRegistryA
RegSetValueW
GetAuditedPermissionsFromAclW
RegSetValueExW
SetFileSecurityW
InitiateSystemShutdownA
BuildTrusteeWithSidA
BuildExplicitAccessWithNameA
LsaQueryDomainInformationPolicy
PrivilegeCheck
LsaRetrievePrivateData
GetSecurityDescriptorOwner
GetNamedSecurityInfoA
ObjectCloseAuditAlarmW
BuildSecurityDescriptorW
GetMultipleTrusteeW
RevertToSelf
GetSecurityDescriptorControl
LsaLookupNames
LsaQueryTrustedDomainInfoByName
AbortSystemShutdownA
RegCloseKey
RegSetKeySecurity
ImpersonateSelf
RegDeleteKeyA
GetSecurityDescriptorGroup
LookupAccountSidW
GetMultipleTrusteeOperationW
DecryptFileW
AccessCheckAndAuditAlarmW
AddAccessAllowedAce
ReportEventW
BackupEventLogA
RegEnumValueW
GetTrusteeTypeW
RegSetValueExA
GetAce
LsaAddAccountRights
RegSetValueA
AbortSystemShutdownW
LookupAccountSidA
EncryptFileA
ObjectOpenAuditAlarmW
RegRestoreKeyA
LookupPrivilegeValueA
SetNamedSecurityInfoW
AccessCheckAndAuditAlarmA
EqualPrefixSid
RegQueryValueW
ObjectDeleteAuditAlarmW
GetEffectiveRightsFromAclA
comctl32
ImageList_SetDragCursorImage
ImageList_GetImageInfo
ImageList_Draw
ord16
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 236KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ