Static task
static1
Behavioral task
behavioral1
Sample
movie1080p.mkv.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
movie1080p.mkv.exe
Resource
win10v2004-20240426-en
General
-
Target
VirusShare_0e2b6b39bbe81e0b6ac0731db4e17699
-
Size
47KB
-
MD5
0e2b6b39bbe81e0b6ac0731db4e17699
-
SHA1
293a6a7311ea919e54a5a6df7150978890d49500
-
SHA256
5fe42582dc10b142360297ff8e9726dff61703c028b4dc663b633e80a4af4e89
-
SHA512
0f40f7910d52ee35041025798bfdbf9c9684383a6e9e883eda0e05f38d46b76499dd4dacdb80a6034e218a3006b709aeecb53926ed77cf436156852672606b61
-
SSDEEP
768:siOe6ImS/GXkDtV0e9nnL+jft1V1LvNyDjYaDwDUy7Wo0wFTMYQZju:pOFWG00AnL+vn1yXYf7WJ4TdQQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/movie1080p.mkv.exe
Files
-
VirusShare_0e2b6b39bbe81e0b6ac0731db4e17699.zip
-
movie1080p.mkv.zip.zip
-
movie1080p.mkv.exe.exe windows:4 windows x86 arch:x86
56a125faf9521a844e2ea890af7236cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateNamedPipeA
DeleteFileA
HeapCreate
FileTimeToLocalFileTime
lstrcmpiA
GetDriveTypeW
lstrcmpiA
lstrlenA
WaitForMultipleObjects
lstrcmpiA
GetProcessHeap
Sleep
GetVolumePathNameA
GetLogicalDriveStringsA
SetLastError
GetModuleHandleA
GetStdHandle
IsValidLocale
lstrcmpiA
lstrcmpiA
GetModuleFileNameA
CreateMailslotA
OpenMutexA
scecli
DeltaNotify
SceOpenPolicy
SceSysPrep
InitializeChangeNotify
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ