Static task
static1
Behavioral task
behavioral1
Sample
SHARK (3).exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
SHARK (3).exe
Resource
win10v2004-20240802-en
General
-
Target
SHARK (3).exe
-
Size
12.5MB
-
MD5
4b7d9bacb697854e3ea493df7d13b668
-
SHA1
5b8cc89ec4046f4226208a5a0507f1d38524047d
-
SHA256
4c03f561b7573a4e7ba4f5d3d67f9cf2db7f6b6e3b6057a7783b8acf9ff2d54f
-
SHA512
9d902a4f6302bf925c7c08ac87dc11f8472621bc8c55147db270323eae853f5a303a5fdd27a4c33fb4147d5a4663d6e42bbfd5e5eaec7ded7b8d96c9db62dcbe
-
SSDEEP
393216:99MY/Hp2ipXPL47at56ZHiOlcX2i06noA:vMwIihL4Q93X3n5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SHARK (3).exe
Files
-
SHARK (3).exe.exe windows:6 windows x64 arch:x64
01f9f6963ed69e2eb7049de9a6cd2317
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
advapi32
ConvertSidToStringSidW
ole32
CoInitializeSecurity
oleaut32
SysFreeString
msvcp140
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
normaliz
IdnToAscii
crypt32
CertGetCertificateChain
wldap32
ord143
ws2_32
listen
userenv
UnloadUserProfile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
api-ms-win-crt-stdio-l1-1-0
fgetpos
api-ms-win-crt-heap-l1-1-0
realloc
api-ms-win-crt-math-l1-1-0
_dsign
api-ms-win-crt-string-l1-1-0
tolower
api-ms-win-crt-convert-l1-1-0
strtoll
api-ms-win-crt-filesystem-l1-1-0
_access
api-ms-win-crt-locale-l1-1-0
localeconv
api-ms-win-crt-environment-l1-1-0
_putenv_s
api-ms-win-crt-time-l1-1-0
_gmtime64
api-ms-win-crt-utility-l1-1-0
qsort
Sections
.text Size: - Virtual size: 544KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.]VE Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.<ul Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ZP] Size: 12.5MB - Virtual size: 12.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ