Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_9ce97a770fdb28dcbc5e4f5462b597ae.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
VirusShare_9ce97a770fdb28dcbc5e4f5462b597ae.exe
Resource
win10v2004-20240508-en
General
-
Target
VirusShare_9ce97a770fdb28dcbc5e4f5462b597ae
-
Size
333KB
-
MD5
9ce97a770fdb28dcbc5e4f5462b597ae
-
SHA1
23ad8aff876f26116b7ee87b47e613b8b2a7319c
-
SHA256
d840bdb019135c0d1a5f8024027981b5f73aa1948c8e3bebe0199737781d3470
-
SHA512
a72c660dba6e3eaa3a711d19f328d7246bf52479618e5636ba04d28c19dafe5449b78fde1d0f2cd936269d396c1659803d746eb368dadb0e4969816eec7d0602
-
SSDEEP
6144:d4iN5B+RlV9tFa5JtFNJ2jv75I8hqpDdSffDFPDbZZoY8jsQXN:cV9t4PjmR3msJU11d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_9ce97a770fdb28dcbc5e4f5462b597ae
Files
-
VirusShare_9ce97a770fdb28dcbc5e4f5462b597ae.exe windows:5 windows x86 arch:x86
a5a4b99941ee434ada42d0fc0f80bb66
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetCapture
AppendMenuW
RegisterWindowMessageW
ShowCursor
IsWindow
DestroyCursor
CreateCursor
ScrollWindow
SetScrollInfo
InsertMenuItemW
LoadStringW
CreateDialogIndirectParamW
RegisterClassExW
ReleaseCapture
FindWindowW
CreateAcceleratorTableW
IsWindowUnicode
SetWindowLongA
DdeQueryConvInfo
SetClipboardData
GetMenuState
DragDetect
InsertMenuW
SetMenuItemInfoW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageA
GetMessageW
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetMonitorInfoW
SetForegroundWindow
SetWindowPlacement
CheckMenuRadioItem
EnableMenuItem
CheckMenuItem
DestroyAcceleratorTable
GetSubMenu
GetMenuItemID
ModifyMenuW
DialogBoxIndirectParamW
DialogBoxParamW
RemoveMenu
LoadIconW
DestroyIcon
mouse_event
GetDesktopWindow
GetDCEx
WindowFromPoint
PtInRect
LockWindowUpdate
SetDlgItemInt
MapWindowPoints
GetKeyState
TrackPopupMenu
GetWindowTextW
MessageBoxA
SetCapture
GetActiveWindow
IsChild
GetDlgCtrlID
RedrawWindow
GetCursorPos
SetWindowsHookExW
UnhookWindowsHookEx
SetParent
SetWindowTextW
LoadBitmapW
CallNextHookEx
CreatePopupMenu
CreateMenu
MonitorFromWindow
DestroyMenu
CallWindowProcA
CharUpperW
CharLowerW
DrawIcon
EndDialog
ScreenToClient
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
CreateDialogParamW
DrawFocusRect
FillRect
FrameRect
SetWindowLongW
GetWindowLongW
GetSysColor
GetClassNameW
PostQuitMessage
LoadMenuW
InflateRect
ClientToScreen
CallWindowProcW
IsWindowVisible
GetWindowRect
ShowWindow
SetWindowPos
SetClipboardViewer
ChangeClipboardChain
SendDlgItemMessageW
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
RegisterClipboardFormatW
CloseClipboard
MessageBoxW
RegisterClassW
BeginPaint
EndPaint
GetFocus
PostMessageW
LoadCursorW
SetCursor
DestroyWindow
CreateCaret
DestroyCaret
GetSystemMetrics
GetWindowPlacement
CreateWindowExW
GetScrollPos
GetScrollRange
UpdateWindow
DefWindowProcW
DrawFrameControl
GetMenu
ShowCaret
MessageBeep
DrawTextW
SetCaretPos
HideCaret
GetParent
ShowScrollBar
SetScrollRange
InvalidateRect
SetScrollPos
GetKeyboardState
ToAscii
wsprintfW
GetDC
DrawEdge
DrawTextExW
ReleaseDC
GetClientRect
MoveWindow
SetFocus
LoadImageW
DrawIconEx
GetDlgItem
SendMessageW
EnableWindow
SystemParametersInfoW
SetMenu
IsDialogMessageW
IsDialogMessageA
PeekMessageW
IsZoomed
DeleteMenu
RealChildWindowFromPoint
IsIconic
DrawMenuBar
GetMenuItemCount
GetMenuStringW
EmptyClipboard
comdlg32
GetOpenFileNameW
PrintDlgW
ChooseColorW
GetSaveFileNameW
shell32
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
Shell_NotifyIconW
DragFinish
ShellExecuteW
DragQueryPoint
DragQueryFileW
ole32
CoUninitialize
CoInitialize
advapi32
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
IsTextUnicode
RegQueryInfoKeyW
RegCloseKey
gdi32
CreatePen
GetStockObject
SetROP2
SetBrushOrgEx
GetROP2
OffsetWindowOrgEx
SetWindowOrgEx
SetBkColor
Rectangle
GetObjectW
CreateCompatibleBitmap
BitBlt
CreateFontW
SaveDC
RestoreDC
MoveToEx
DeleteObject
SetBkMode
SelectObject
DeleteDC
CreateCompatibleDC
LineTo
CreateHatchBrush
GetTextMetricsW
GetTextExtentPoint32W
CreateSolidBrush
GetPixel
CreateFontIndirectW
GetTextExtentPointW
GetDeviceCaps
DPtoLP
StartDocW
StartPage
SetTextAlign
ExtTextOutW
EndPage
EndDoc
EnumFontFamiliesExW
CreateBitmap
PatBlt
SetTextColor
CreatePatternBrush
comctl32
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_Create
ImageList_DragEnter
ImageList_Draw
ImageList_Add
ImageList_Destroy
ImageList_AddMasked
ImageList_SetIconSize
InitCommonControlsEx
ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetImageCount
ImageList_DragMove
ImageList_DragShowNolock
ImageList_GetImageInfo
shlwapi
PathIsRelativeW
PathAddExtensionW
PathAppendW
PathRemoveFileSpecW
PathMatchSpecW
PathIsDirectoryW
PathCompactPathExW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW
PathRemoveExtensionW
PathStripPathW
kernel32
ExitProcess
GetModuleHandleA
GetSystemTimeAsFileTime
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
ReadFile
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalFree
LoadLibraryW
GetProcAddress
CreateFileW
GetCurrentProcessId
GetCurrentProcess
CloseHandle
GlobalFree
FreeLibrary
GetCurrentDirectoryW
SetCurrentDirectoryW
GetModuleHandleW
GetCurrentThreadId
GetLastError
GlobalLock
GlobalUnlock
GetFileAttributesW
SetFileAttributesW
HeapFree
GetFullPathNameW
GetLongPathNameW
lstrcmpiW
DeleteFileW
lstrcpyW
lstrlenW
GetModuleFileNameW
lstrcatW
lstrcmpW
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
HeapReAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEndOfFile
GetDriveTypeA
CompareStringA
CompareStringW
HeapSize
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeA
GetStringTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetCurrentDirectoryA
GetTimeFormatA
GetDateFormatA
WriteFile
GetModuleFileNameA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LocalUnlock
LoadLibraryA
HeapDestroy
HeapCreate
VirtualFree
GetCommandLineW
SetLastError
GetTempPathW
LocalAlloc
LocalLock
FindResourceW
LoadResource
LockResource
SizeofResource
GetACP
MulDiv
GetLocalTime
GetDateFormatW
GetTimeFormatW
ExpandEnvironmentStringsW
GetVersionExW
GetSystemInfo
lstrcpynW
CopyFileW
TerminateThread
FindFirstFileW
FindNextFileW
FindClose
CreateMutexW
CreateThread
GlobalSize
CreateDirectoryW
WaitForSingleObject
ReleaseMutex
Sleep
GlobalAlloc
ExitThread
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
MoveFileW
Sections
.srewedf Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qsedsds Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ