Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_2cafc37c092db4362830df66cd7aa44f.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
VirusShare_2cafc37c092db4362830df66cd7aa44f.exe
Resource
win10v2004-20240508-en
General
-
Target
VirusShare_2cafc37c092db4362830df66cd7aa44f
-
Size
320KB
-
MD5
2cafc37c092db4362830df66cd7aa44f
-
SHA1
8282e175d71ef94d5ff443cf4176e5964541f9d4
-
SHA256
76c319a3da9d92ac2d69f99f97562b7d38be62efbf5da69c81b3c23d716d91a7
-
SHA512
6ccc77bb416d3a00210bd020f73106150f171d97fd6ff0830d3f15a38702ef455c0e80f0fb854fbbf7aff8ee593ed839ebd3d3778fb8f3b426b9a6be8aabe648
-
SSDEEP
6144:p+UivvEq6VDiAW3reShVJznXFwEyjQQAygBK6Jyd5:M53EBVOUYVwVjQ1c6O5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_2cafc37c092db4362830df66cd7aa44f
Files
-
VirusShare_2cafc37c092db4362830df66cd7aa44f.exe windows:4 windows x86 arch:x86
947c1ee377e5b71c4199a09586cc2539
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_ReplaceIcon
imm32
ImmGetProperty
gdi32
EndPath
CreateDIBitmap
GetMetaFileBitsEx
FrameRgn
GetDeviceCaps
SetBitmapBits
PolylineTo
GetStretchBltMode
GetEnhMetaFileHeader
GetViewportOrgEx
GetCharWidth32W
SetWinMetaFileBits
DPtoLP
SetBkColor
ResizePalette
ExtCreatePen
GetTextMetricsW
StartPage
CreatePolygonRgn
GetTextExtentPointA
SetAbortProc
Ellipse
CreateMetaFileA
GetRegionData
CreateBrushIndirect
SetMapperFlags
UnrealizeObject
SetPixelFormat
SetEnhMetaFileBits
DeleteObject
LineTo
GetFontLanguageInfo
AddFontResourceA
TranslateCharsetInfo
PlayEnhMetaFile
GetBitmapBits
EnumFontFamiliesExA
SwapBuffers
GetLogColorSpaceA
advapi32
AdjustTokenGroups
msvcrt
_mbsset
mpr
WNetGetUniversalNameA
kernel32
GlobalLock
CreateTapePartition
GetFileAttributesExA
GlobalUnfix
GetSystemDefaultLCID
GetDateFormatA
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ