Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_627ec4f42d9649bc8309d87f03d1c288.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
VirusShare_627ec4f42d9649bc8309d87f03d1c288.exe
Resource
win10v2004-20240426-en
General
-
Target
VirusShare_627ec4f42d9649bc8309d87f03d1c288
-
Size
368KB
-
MD5
627ec4f42d9649bc8309d87f03d1c288
-
SHA1
6cd845e8de2c2197cbab48f94eea823f88b0efd9
-
SHA256
3503e011b2844b6eb3f18b3a7c0965ff07171ac6af2488fcf03c0e69d95cd066
-
SHA512
62899ac229fbfff6cd6ace9610b6d6dc027cc32ffe5b7b2c08fb3445815e134caec32047e0a5129118675f22b32aed516fc877b33c90da98261eb44f119a74bd
-
SSDEEP
6144:e680E92oeOE4G63VEuFwm+DDrhd3wbYqaUq/JyKSmi97Msg4piwbBS9lkw86C:e68PIHt6DObD5dmYqarImi9jB4SBylkN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource VirusShare_627ec4f42d9649bc8309d87f03d1c288
Files
-
VirusShare_627ec4f42d9649bc8309d87f03d1c288.exe windows:4 windows x86 arch:x86
375242f7ca8d8be2e09f3382a08d29b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
PolyBezierTo
EqualRgn
OffsetRgn
SetPolyFillMode
GetBkColor
DeleteEnhMetaFile
EndDoc
RemoveFontResourceA
CreateFontIndirectW
GetTextMetricsA
SetViewportOrgEx
GetMapMode
CreateRectRgn
CreatePenIndirect
GetROP2
SetPixel
SetPixelV
CreateFontIndirectA
PlayEnhMetaFile
GetFontData
GetBitmapBits
GetCharABCWidthsW
SetWindowOrgEx
GetGlyphOutlineA
GetTextFaceA
GetBrushOrgEx
CreateICW
PatBlt
CancelDC
GetWindowOrgEx
StretchBlt
SetAbortProc
OffsetWindowOrgEx
GetClipBox
StartDocW
ExtCreatePen
GetStockObject
GetNearestPaletteIndex
GetKerningPairsA
StartDocA
EnumFontsW
SetTextColor
Arc
Polyline
RectVisible
CreateDCW
ExtCreateRegion
OffsetClipRgn
EnumFontFamiliesA
GetEnhMetaFilePaletteEntries
FillRgn
EnumMetaFile
ExtTextOutA
PtVisible
GetPixel
StrokePath
RestoreDC
GetWinMetaFileBits
GetTextAlign
SetTextCharacterExtra
DeleteObject
EndPage
ExtSelectClipRgn
CreateCompatibleBitmap
TextOutA
SetTextAlign
GetDeviceCaps
ExtEscape
GetGlyphOutlineW
CopyEnhMetaFileA
CreateICA
SelectClipRgn
CreatePen
BeginPath
ScaleViewportExtEx
SaveDC
CopyEnhMetaFileW
CreateDIBSection
GetObjectType
OffsetViewportOrgEx
SwapBuffers
SetRectRgn
SetWinMetaFileBits
GetSystemPaletteEntries
ResizePalette
CreateEllipticRgn
SetBitmapBits
CloseEnhMetaFile
UpdateColors
RealizePalette
SetROP2
GetCharWidthA
GetRgnBox
user32
LoadIconA
GetMenu
CallMsgFilterA
RegisterClassExW
RemoveMenu
GetCapture
MessageBoxA
DialogBoxIndirectParamW
DestroyCursor
LoadBitmapW
mouse_event
BeginDeferWindowPos
SetWindowPlacement
IsDialogMessageA
MapVirtualKeyA
TranslateAcceleratorA
IsClipboardFormatAvailable
GetProcessWindowStation
CreateWindowExW
CreateDialogParamA
EmptyClipboard
DrawStateA
SetClassLongW
GetParent
GetDlgItemInt
DdeConnect
GetCursorPos
FindWindowA
InsertMenuW
SetScrollPos
ShowScrollBar
EnableScrollBar
SendDlgItemMessageA
DefWindowProcA
IsCharAlphaW
ShowOwnedPopups
GetForegroundWindow
CharLowerA
CharToOemA
ChangeDisplaySettingsA
SystemParametersInfoW
SetCaretPos
IsWindow
CharUpperBuffW
GetUserObjectInformationW
TrackPopupMenuEx
GetMessagePos
GetScrollPos
GetSysColor
FillRect
wvsprintfA
DrawIcon
GetClassInfoW
GetCaretPos
ClientToScreen
SetPropA
SetDlgItemInt
DestroyCaret
CopyAcceleratorTableW
DrawIconEx
CharNextW
DialogBoxParamA
IsChild
GetClassInfoExW
GetScrollRange
RegisterHotKey
GetFocus
GetClassInfoA
DrawTextW
PostMessageW
LoadMenuW
GetWindowLongA
DdeFreeStringHandle
TranslateMDISysAccel
LoadImageA
SendInput
RegisterWindowMessageA
ReuseDDElParam
SystemParametersInfoA
IsWindowVisible
SendDlgItemMessageW
PtInRect
DrawTextExA
SetClipboardData
SetClassLongA
SetRect
IsZoomed
GetMenuItemCount
SetMenuDefaultItem
ModifyMenuA
GetSysColorBrush
GetDlgCtrlID
GetQueueStatus
GetClassNameA
CheckRadioButton
MoveWindow
CharUpperW
UnhookWinEvent
CharNextA
GetGUIThreadInfo
UnionRect
TranslateAcceleratorW
GetWindowModuleFileNameA
MapDialogRect
VkKeyScanW
IsIconic
VkKeyScanExW
RegisterClipboardFormatW
OemToCharBuffA
KillTimer
SetDlgItemTextW
GetMessageExtraInfo
CreateMenu
UnpackDDElParam
AttachThreadInput
EnumDisplaySettingsW
GetLastActivePopup
CreateDialogIndirectParamA
msvcrt
_y1
_controlfp
_time64
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_getdcwd
__dllonexit
sqrt
tanh
_wspawnlpe
strxfrm
_acmdln
__getmainargs
_initterm
version
GetFileVersionInfoW
GetFileVersionInfoSizeA
VerFindFileA
VerQueryValueA
advapi32
SetNamedSecurityInfoW
GetFileSecurityW
RegOverridePredefKey
EnumDependentServicesA
RegOpenKeyExW
CloseServiceHandle
RegDeleteKeyA
RegUnLoadKeyW
GetAce
InitializeSecurityDescriptor
CreateServiceW
ReadEventLogW
InitiateSystemShutdownA
GetUserNameW
OpenSCManagerW
GetSidLengthRequired
LookupAccountNameW
CopySid
ControlService
LookupPrivilegeValueA
RegOpenKeyExA
DeleteService
SetFileSecurityW
ChangeServiceConfigA
RegSetValueExW
GetAclInformation
ChangeServiceConfig2W
LsaOpenPolicy
StartServiceCtrlDispatcherW
EnumServicesStatusA
RegCreateKeyExW
RegQueryValueW
AllocateAndInitializeSid
GetSidSubAuthority
ReportEventA
MakeAbsoluteSD
SetFileSecurityA
RegConnectRegistryA
SetSecurityDescriptorSacl
RegSetValueExA
RegCreateKeyW
ReportEventW
RegSetKeySecurity
LookupPrivilegeValueW
RegEnumKeyW
GetLengthSid
RegisterServiceCtrlHandlerA
LockServiceDatabase
RegQueryInfoKeyW
RegRestoreKeyW
SetKernelObjectSecurity
RegCreateKeyExA
AdjustTokenPrivileges
RegSetValueA
RegNotifyChangeKeyValue
GetKernelObjectSecurity
RevertToSelf
GetSidSubAuthorityCount
RegCreateKeyA
LsaQueryInformationPolicy
ChangeServiceConfigW
CreateProcessAsUserW
GetSidIdentifierAuthority
GetUserNameA
AddAce
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ