Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_7d154d615d82791f743287eb9d8fd83a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VirusShare_7d154d615d82791f743287eb9d8fd83a.exe
Resource
win10v2004-20240226-en
General
-
Target
VirusShare_7d154d615d82791f743287eb9d8fd83a
-
Size
608KB
-
MD5
7d154d615d82791f743287eb9d8fd83a
-
SHA1
c061f7d62b7dc27ebc7b1c50ad36fb1cc2dd35c3
-
SHA256
4b2b8f1fc025db65b9def980f5f9262c3c337bd23b0280898d34871e3ba5ae80
-
SHA512
2becd1255878c3927283f635999aca72b3906aea3070fe2825c7c4e3adc5c9d1872bfd9143793a7c14b39165a3abe64b9210d172e91108f5654f465b1ed7accf
-
SSDEEP
12288:jdO9CCSkf3WRyp6Czy5Ik1Lolk3aHPSNkL7BugBL6Czy5Ik1Lolk3aHPSNkL7:jdO9CCSkf3WRypNyi3AUPv7xBLNyi3Ag
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_7d154d615d82791f743287eb9d8fd83a
Files
-
VirusShare_7d154d615d82791f743287eb9d8fd83a.exe windows:4 windows x86 arch:x86
879931083d4aa217c7389ae3210e9d5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasGetProjectionInfoA
gdi32
OffsetClipRgn
CreateICW
FillRgn
GdiFlush
SetBkColor
GetTextColor
SaveDC
RectInRegion
PolyBezierTo
GetCharABCWidthsW
SetPolyFillMode
ResetDCW
CreateFontA
SetPixelV
GetTextExtentPoint32A
GetDeviceCaps
GetSystemPaletteEntries
CopyEnhMetaFileW
EnumFontFamiliesExW
CreateEnhMetaFileW
EnumMetaFile
CreateCompatibleBitmap
GetEnhMetaFileHeader
CreatePenIndirect
EndPage
ExtFloodFill
GetDIBColorTable
Polygon
OffsetRgn
SetWindowOrgEx
CombineTransform
GetClipBox
SetMetaFileBitsEx
Polyline
CreatePen
SetViewportOrgEx
CreateCompatibleDC
GetCharWidthA
CreateRectRgn
CreateDIBSection
GetStockObject
SetPixelFormat
CreateDIBPatternBrushPt
GetObjectType
SetArcDirection
IntersectClipRect
GetWindowOrgEx
EnumFontFamiliesA
SetGraphicsMode
GetTextFaceA
GetObjectA
GetTextCharsetInfo
GetBkMode
SetTextColor
SetViewportExtEx
GetPixel
ExtCreateRegion
CreateFontIndirectW
SetStretchBltMode
CreateSolidBrush
CombineRgn
CreateBitmap
RealizePalette
GetGlyphOutlineA
BeginPath
AbortDoc
CloseEnhMetaFile
SetTextAlign
RestoreDC
OffsetWindowOrgEx
CreateICA
PlayMetaFileRecord
GetObjectW
SetDIBColorTable
PtVisible
SetAbortProc
GetFontData
PatBlt
Escape
BitBlt
StartDocA
UnrealizeObject
StrokePath
GetClipRgn
SetDeviceGammaRamp
GetWorldTransform
CreateFontIndirectA
DeleteObject
GetGlyphOutlineW
Arc
PolyDraw
SelectPalette
CreateEllipticRgn
PlayEnhMetaFile
ExtCreatePen
SetPixel
SetWorldTransform
GetBrushOrgEx
GetBkColor
StartPage
GetTextMetricsW
CloseFigure
CreateRoundRectRgn
EnumFontsW
EndPath
CancelDC
WidenPath
CreateRectRgnIndirect
GetRgnBox
SetBitmapBits
ExtTextOutA
DeleteEnhMetaFile
SetColorAdjustment
GetNearestPaletteIndex
EnumFontsA
RectVisible
GetTextExtentPointA
SetMetaRgn
SetMapMode
SetWindowExtEx
GetBitmapBits
SetWinMetaFileBits
ExtSelectClipRgn
MaskBlt
SetBkMode
DeleteColorSpace
SetROP2
EndDoc
UpdateColors
Chord
Ellipse
CreateDCW
GetROP2
TextOutA
SetTextCharacterExtra
GetEnhMetaFilePaletteEntries
Rectangle
ScaleViewportExtEx
StartDocW
PolyBezier
user32
GetSystemMetrics
LoadIconA
EnableWindow
SendMessageA
DrawIcon
IsIconic
GetClientRect
imm32
ImmSetCompositionWindow
ImmNotifyIME
ImmGetOpenStatus
ImmGetConversionStatus
ImmGetGuideLineA
ImmGetProperty
ImmSetConversionStatus
ImmSetOpenStatus
ImmGetRegisterWordStyleA
ImmDestroyContext
ImmGetContext
ImmReleaseContext
msvcrt
_controlfp
_ismbcspace
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
ldiv
_wcmdln
_inpw
_onexit
__dllonexit
_snwprintf
__toascii
_setmbcp
kernel32
DefineDosDeviceW
GetFullPathNameW
GetProfileStringA
GetModuleHandleA
GetStartupInfoA
mfc42
ord324
ord4234
ord4710
ord1168
ord1017
ord4425
ord4627
ord1005
ord1085
ord1005
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord1085
ord4441
ord4837
ord3798
ord5280
ord4353
ord755
ord470
ord1050
ord1027
ord1576
ord1096
ord4274
ord6375
ord4486
ord2554
ord1017
ord5731
ord3922
ord1089
ord1075
ord2396
ord3346
ord1085
ord5302
ord2725
ord1035
ord4698
ord5307
ord1015
ord5714
ord2982
ord1015
ord3259
ord4465
ord1056
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord1051
ord4424
ord3738
ord561
ord815
ord2514
ord641
ord5265
ord4376
ord4853
ord4998
ord6052
ord4078
ord1775
ord4407
ord1057
ord2385
ord5163
ord6374
Sections
.text Size: 364KB - Virtual size: 362KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 204KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ