Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_77e9354a8e042db3fd8df6973774c471.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VirusShare_77e9354a8e042db3fd8df6973774c471.exe
Resource
win10v2004-20240426-en
General
-
Target
VirusShare_77e9354a8e042db3fd8df6973774c471
-
Size
306KB
-
MD5
77e9354a8e042db3fd8df6973774c471
-
SHA1
795d63de10555aebcc4f1bb6e4b5519222567c4e
-
SHA256
787842e53627af968252982bd25116b33f579ecdd56dd5ba1aa4979971a198d8
-
SHA512
1ccb911927cd852be16a0e3540ff339a744608f4444f76b1031b5ae152cddc7a6b4bc7c69e9887688fa24843100091d25498a4bb944dd7d116f20ca54c7ed680
-
SSDEEP
6144:orZwXFrVfF+0pilV4o1DKx5tOXnqLpQ+9o8Qneqo:oVwXFlst4YGxLOXnWQiZQs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_77e9354a8e042db3fd8df6973774c471
Files
-
VirusShare_77e9354a8e042db3fd8df6973774c471.exe windows:4 windows x86 arch:x86
f65a481c762820e8e4e0f24407dc0691
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mpr
WNetGetUniversalNameW
MultinetGetConnectionPerformanceA
WNetConnectionDialog
WNetGetProviderNameA
WNetEnumResourceA
WNetConnectionDialog1W
WNetCancelConnectionA
WNetGetLastErrorA
WNetAddConnection3W
WNetGetUniversalNameA
WNetAddConnectionA
WNetGetNetworkInformationA
WNetOpenEnumW
WNetCloseEnum
WNetOpenEnumA
WNetAddConnection2W
WNetAddConnection2A
WNetGetConnectionW
WNetGetUserW
WNetCancelConnectionW
WNetAddConnection3A
advapi32
IsTokenRestricted
AdjustTokenGroups
GetOldestEventLogRecord
user32
NotifyWinEvent
winmm
midiOutGetID
waveOutPause
midiStreamOpen
waveInGetErrorTextA
waveInGetDevCapsW
waveOutSetVolume
mmioRead
midiStreamPause
midiOutUnprepareHeader
sndPlaySoundW
waveOutGetPosition
waveInGetErrorTextW
midiInGetErrorTextW
waveInAddBuffer
midiInClose
mixerSetControlDetails
midiStreamPosition
midiOutMessage
midiOutShortMsg
midiOutCachePatches
waveInStop
mciSendStringW
SendDriverMessage
midiInStart
mmioSetBuffer
midiInReset
waveInUnprepareHeader
mmioStringToFOURCCW
mciGetDeviceIDA
midiOutGetNumDevs
midiInStop
DefDriverProc
waveOutRestart
mixerGetLineInfoW
midiConnect
midiOutLongMsg
midiInMessage
midiInGetErrorTextA
mixerClose
midiStreamOut
OpenDriver
mciGetDeviceIDFromElementIDW
PlaySoundA
DrvGetModuleHandle
midiInOpen
mmioSetInfo
mmioDescend
midiOutGetErrorTextA
waveOutUnprepareHeader
joyGetDevCapsA
auxGetNumDevs
auxGetDevCapsW
joyGetPosEx
GetDriverModuleHandle
midiOutSetVolume
waveInMessage
mmioWrite
waveInOpen
timeBeginPeriod
joyGetNumDevs
mciGetDeviceIDW
waveInClose
mciSendCommandA
midiOutGetDevCapsA
mixerGetDevCapsA
mciGetErrorStringA
midiOutReset
midiStreamRestart
mmioAscend
midiInGetNumDevs
waveOutSetPitch
midiInAddBuffer
waveOutGetPlaybackRate
sndPlaySoundA
mixerGetLineControlsA
mixerGetControlDetailsA
joyGetThreshold
waveOutBreakLoop
midiInUnprepareHeader
joyGetDevCapsW
timeGetDevCaps
waveOutGetVolume
midiOutGetVolume
midiInGetDevCapsW
midiStreamStop
mciGetCreatorTask
mciGetErrorStringW
midiDisconnect
midiOutGetErrorTextW
midiOutClose
joyGetPos
mmioInstallIOProcA
mixerGetDevCapsW
waveInReset
mixerGetNumDevs
kernel32
GetModuleHandleA
GetStartupInfoA
DeleteAtom
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
Sections
.text Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ