V:\geritjei\adkmgrjgii\dfe\wfef.pdb
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_6d3919774e2c47108f89572ac4edfd36.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
VirusShare_6d3919774e2c47108f89572ac4edfd36.exe
Resource
win10v2004-20240426-en
General
-
Target
VirusShare_6d3919774e2c47108f89572ac4edfd36
-
Size
368KB
-
MD5
6d3919774e2c47108f89572ac4edfd36
-
SHA1
b8906a6ce0db3a312b48eb683210193fe1c79797
-
SHA256
43c2e02552224325d2794aa77736bc2ceec565144dc0bb2c07ccdfbfb85f52c2
-
SHA512
406dcc50c2cd9c2815db796d63e6d50d0c244fdabfd1f9b6c05e9090a45abe1adeca6ab889982f4b28bba3fcad05f1b6bddb0b75d90cfd05f63c57c8da11051c
-
SSDEEP
6144:Vdp8rEHy/RucZDj7tR49k1dMflnnnl8nq5sIDc9IQ4rmSfZd+nDKuNAvwu:Vd+Ky/RucZT6uYnnnl8q2IDc9IQ4rjm4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_6d3919774e2c47108f89572ac4edfd36
Files
-
VirusShare_6d3919774e2c47108f89572ac4edfd36.exe windows:4 windows x86 arch:x86
ae2c6ac87c067dc56504abecfd4e3697
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB Paths
Imports
ole32
CoFreeLibrary
comdlg32
ChooseColorW
imm32
ImmSetStatusWindowPos
kernel32
GlobalMemoryStatus
CreateTapePartition
FindNextVolumeMountPointA
CreateEventW
setupapi
SetupDiGetActualSectionToInstallA
urlmon
CoInternetCreateZoneManager
shell32
SHFileOperationA
clusapi
GetClusterResourceKey
msvcrt
memcpy
memset
ntdsapi
DsFreeSpnArrayW
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ordo Size: 4KB - Virtual size: 731B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.t Size: 4KB - Virtual size: 49B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt0 Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ