Static task
static1
Behavioral task
behavioral1
Sample
movie1080p.mkv.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
movie1080p.mkv.exe
Resource
win10v2004-20240508-en
General
-
Target
VirusShare_3d454e79ae4556146678c09bdaea21ff
-
Size
67KB
-
MD5
3d454e79ae4556146678c09bdaea21ff
-
SHA1
b939f8513574ad9b9453ba217b906dbc814a2885
-
SHA256
fb853ca65a612174d56dd07589798d89604176c83d78df938d4b7b97a23e4855
-
SHA512
6a1e8a8631d631a8175dce2955689b9adea6633a1ccb6863db098ae4a503ca3d56c358cb49454f25284e1699da8397377ed686b09a164a365b6c0e65c265cd24
-
SSDEEP
1536:MBaTxJ1gJC22kAVF1Cd2PL9ikxjV4vCoW70AL9Y8:MBaNJi+kW182PL9rN2V0fh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/movie1080p.mkv.exe
Files
-
VirusShare_3d454e79ae4556146678c09bdaea21ff.zip
-
movie1080p.mkv.zip.zip
-
movie1080p.mkv.exe.exe windows:4 windows x86 arch:x86
94e7a9a4f7b2dc9462fcc76dde828401
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
PropertySheetW
ord15
PropertySheetA
ord5
CreateStatusWindowW
ord8
FlatSB_SetScrollProp
FlatSB_GetScrollProp
UninitializeFlatSB
FlatSB_SetScrollInfo
ord6
FlatSB_SetScrollPos
InitCommonControlsEx
FlatSB_EnableScrollBar
ord2
ord17
CreateToolbarEx
CreatePropertySheetPageA
shlwapi
StrChrIW
StrCmpNA
kernel32
HeapLock
GetOverlappedResult
GetModuleHandleA
GetProcAddress
GetCommandLineA
VirtualAllocEx
GetTickCount
LocalFree
GetCurrentProcessId
GetCurrentProcess
DeleteFileA
GetHandleInformation
OpenEventA
GetProcessHeap
CopyFileA
GetExitCodeThread
GetModuleFileNameA
QueryPerformanceCounter
LocalReAlloc
GetStartupInfoA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetLastError
FlushFileBuffers
WriteFile
InitializeCriticalSection
DeleteCriticalSection
ReadFile
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
HeapAlloc
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
SetStdHandle
CloseHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
GetStringTypeA
GetStringTypeW
SetEndOfFile
LCMapStringA
LCMapStringW
uxtheme
GetThemeSysColorBrush
comdlg32
ChooseColorW
FindTextA
ReplaceTextW
GetOpenFileNameA
GetFileTitleW
PageSetupDlgW
PrintDlgW
ChooseColorA
CommDlgExtendedError
ChooseFontA
ReplaceTextA
ChooseFontW
PageSetupDlgA
GetOpenFileNameW
PrintDlgA
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ