Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_6b3f01729d9f544a9ade26bdda98041f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VirusShare_6b3f01729d9f544a9ade26bdda98041f.exe
Resource
win10v2004-20240226-en
General
-
Target
VirusShare_6b3f01729d9f544a9ade26bdda98041f
-
Size
316KB
-
MD5
6b3f01729d9f544a9ade26bdda98041f
-
SHA1
3d503f0a596f577e410c05cf1b314dd61424e560
-
SHA256
0658c6bbf1a37ec892996e2adc76ef0fb39c9e4dc197d05cf523748d56bf934e
-
SHA512
6cc5c368b083394c726e8c24134fdc797efa7a215c15e01e7fcb36a5c7c5d897ac2672bf774043429001e5e19cf328aff56e1523042f38611e2a161e0f974914
-
SSDEEP
6144:uRcNUBOfj1ANLQQ2ij56Nxvc78DgDDXxuRPS9kSdY0z7:l6Ie1QQVj54xC8cHXxuJUkGY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_6b3f01729d9f544a9ade26bdda98041f
Files
-
VirusShare_6b3f01729d9f544a9ade26bdda98041f.exe windows:5 windows x86 arch:x86
4ff41b4854bfb368236b19c034e9335a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
memcpy
sprintf
kernel32
ReadProcessMemory
Sections
.text Size: 245KB - Virtual size: 245KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ