Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_6e2427a12098bce4423295dfcd8aa5f0.exe
Resource
win7-20240704-en
General
-
Target
VirusShare_6e2427a12098bce4423295dfcd8aa5f0
-
Size
445KB
-
MD5
6e2427a12098bce4423295dfcd8aa5f0
-
SHA1
c50cd10f12dc59cde97f098a89c2885140c5a4aa
-
SHA256
c597d7555eb3e4170c52ebf88fee177a1aec527b2a5057e3b8892bf509500018
-
SHA512
73844d02e5e609b75fee279f9280a55e40945149acc981b48a62176e8d60c5c6322615cba56f3e734efb786c7fd89dddac70c1cbcb28263d7e12067dc685e1a9
-
SSDEEP
12288:/U1AjBd7/iWkUC36MnHTAWT3dWBuYogTH6c1ThX6:81QB9/i3XMWT3ACwhX6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_6e2427a12098bce4423295dfcd8aa5f0
Files
-
VirusShare_6e2427a12098bce4423295dfcd8aa5f0.exe windows:5 windows x86 arch:x86
e1afd2e78c12bfbf367b85cee3667ade
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
FlushFileBuffers
SetStdHandle
CreateFileA
ReadFile
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
GetStringTypeW
MultiByteToWideChar
LCMapStringW
LoadLibraryW
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
HeapFree
HeapQueryInformation
HeapSize
HeapReAlloc
WriteFile
GetConsoleCP
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
ExitProcess
GetSystemTimeAsFileTime
LocalAlloc
GetTickCount
FindNextFileA
RaiseException
CloseHandle
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetFileAttributesA
SetLastError
GetModuleHandleW
GetProcAddress
TlsFree
GetCurrentThreadId
GetConsoleMode
CompareStringW
SetEnvironmentVariableA
SetFilePointer
SetEndOfFile
lstrcpyA
LocalFree
GetEnvironmentStringsW
GetModuleHandleA
FindClose
GetLastError
FindFirstFileA
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
CreateFileW
UnhandledExceptionFilter
GetCurrentProcess
QueryPerformanceCounter
GetSystemInfo
lstrcatA
HeapCreate
GetProcessHeap
HeapAlloc
GetCurrentProcessId
GetFullPathNameA
TerminateProcess
GetModuleFileNameW
IsBadReadPtr
HeapValidate
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
user32
CopyRect
SetMenuItemInfoA
RegisterClassA
EndPaint
DestroyWindow
ScreenToClient
SendInput
FillRect
GetMenuItemID
GetSubMenu
FindWindowExA
SendMessageA
GetDC
FindWindowA
OffsetRect
ReleaseDC
GetMenuState
DefWindowProcA
GetMenuItemInfoA
GetMenuStringA
ShowWindow
GetMenuItemCount
DefMDIChildProcA
SystemParametersInfoA
GetSystemMetrics
SetWindowTextA
UpdateWindow
LoadCursorA
gdi32
SetTextColor
DeleteDC
CreateFontIndirectA
SelectObject
CreateCompatibleDC
CreateBitmapIndirect
SetTextJustification
CreateEllipticRgnIndirect
GetObjectA
GetStockObject
EnumFontsA
BitBlt
advapi32
LsaNtStatusToWinError
LsaFreeMemory
LsaQueryInformationPolicy
ole32
CoCreateGuid
CoFileTimeNow
msvfw32
DrawDibTime
crypt32
CertGetNameStringA
comctl32
ord17
ord16
rpcrt4
UuidToStringA
oledlg
ord4
Sections
.text Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ