D:\data\src\m3-for-merc-1\build\release\obj\src\loader\loader.pdb
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_5f5743a4bc9f5eb7d9b10a8fd016f160.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VirusShare_5f5743a4bc9f5eb7d9b10a8fd016f160.dll
Resource
win10v2004-20240426-en
General
-
Target
VirusShare_5f5743a4bc9f5eb7d9b10a8fd016f160
-
Size
142KB
-
MD5
5f5743a4bc9f5eb7d9b10a8fd016f160
-
SHA1
3909c640f2ace7cf03b9cdc1dbde6fccc9149a39
-
SHA256
671d710dd1eb9dabb7b3dae19c83b96b38af43609ccf1486fcdee08ac8cbf734
-
SHA512
da58fc07bbb51a8f10a6d768ac743b2deaf0e7eada3ed12bbac45185d81e313aa5c74bd8bb14ef9d08076bc009109fe6fe6f41cd203cfda08e6b8d05e09d8f47
-
SSDEEP
1536:DJ5UJvna5HbazrkuggI9ZJXIP0qewY/+lW5JlLRijv6/lQ:DWaZbazrkgwIHewY/+lkJvG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_5f5743a4bc9f5eb7d9b10a8fd016f160
Files
-
VirusShare_5f5743a4bc9f5eb7d9b10a8fd016f160.dll windows:4 windows x86 arch:x86
7b2af642dbbd83b09e841cfdc3856737
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
strerror
kernel32
SetStdHandle
FreeConsole
LocalAlloc
GetConsoleMode
GetConsoleScreenBufferInfo
SetHandleCount
SetFilePointer
GetFileType
FlushFileBuffers
GetLocaleInfoW
GetLocaleInfoA
GetOEMCP
GetACP
Exports
Exports
bntyjdljopd
xvdsedsfdf
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1006B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ