Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_6f2b558e974817ff40006ddb7039c388.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VirusShare_6f2b558e974817ff40006ddb7039c388.exe
Resource
win10v2004-20240426-en
General
-
Target
VirusShare_6f2b558e974817ff40006ddb7039c388
-
Size
300KB
-
MD5
6f2b558e974817ff40006ddb7039c388
-
SHA1
8c3e9524634a65018b1478e97f231121402b2a4f
-
SHA256
ce68afd45e2b3448aee1d06ea8f46a5e6ca9d4d370be316e96fa720a9ab76ada
-
SHA512
5b0d7f7bbbf450041be3a6cff9fae1737864b3b56415b6f691ae093fce27f2d9d2d38453a665d00eceeced785a9a952de0f57aa22681a76023904de06f44454b
-
SSDEEP
6144:3LMhHA+gJaJUn86taUfuYdxmefIsx0aPZTqEgi9Ht:3LMV5BzUfHdxr9WaBuED
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_6f2b558e974817ff40006ddb7039c388
Files
-
VirusShare_6f2b558e974817ff40006ddb7039c388.exe windows:4 windows x86 arch:x86
c496b823d323ba611f6784629e09b260
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VARIANT_UserFree
version
VerLanguageNameA
user32
DdeGetLastError
CreateIconFromResource
kernel32
GetLargestConsoleWindowSize
Process32First
Thread32First
GetPrivateProfileStructW
FlushViewOfFile
CreatePipe
GetFileTime
FindFirstFileA
GetACP
GetConsoleScreenBufferInfo
GetDateFormatA
FileTimeToDosDateTime
GetTempPathA
GetUserDefaultLCID
GetDefaultCommConfigA
GetTickCount
GetLogicalDrives
GetLargestConsoleWindowSize
Process32First
Thread32First
GetPrivateProfileStructW
FlushViewOfFile
CreatePipe
GetFileTime
FindFirstFileA
GetACP
GetConsoleScreenBufferInfo
GetDateFormatA
FileTimeToDosDateTime
GetTempPathA
GetUserDefaultLCID
GetDefaultCommConfigA
GetTickCount
GetLogicalDrives
comctl32
InitCommonControlsEx
ord8
ImageList_Merge
ImageList_SetDragCursorImage
ImageList_DrawEx
ImageList_LoadImageA
ImageList_SetBkColor
ImageList_Write
msvcrt
_mbsspnp
gdi32
GetCharacterPlacementA
CreateDCA
SetMetaFileBitsEx
CreatePolyPolygonRgn
advapi32
GetTokenInformation
SetSecurityDescriptorOwner
ImpersonateLoggedOnUser
SetSecurityDescriptorGroup
GetTrusteeTypeA
NotifyBootConfigStatus
SetTokenInformation
RevertToSelf
rasapi32
RasEnumDevicesA
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ