Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_007ba442f5b2c76a737322525c270aa6.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
VirusShare_007ba442f5b2c76a737322525c270aa6.exe
Resource
win10v2004-20241007-en
General
-
Target
VirusShare_007ba442f5b2c76a737322525c270aa6
-
Size
177KB
-
MD5
007ba442f5b2c76a737322525c270aa6
-
SHA1
a272d5e80c3165b7498e08d772694df3269cc822
-
SHA256
69cb39599ec6dc8f303ce5c4d31ada8077ad4b75bccb19225693ea7fd85b2788
-
SHA512
20870db83147b4602bafaf797bbe0353f4df598405373c6682e65c581be4a9980286cd205edf9147a6956ac03df8db7ee723b0316215991838341b6252f0aba8
-
SSDEEP
3072:ifQ/bZMoraTj2oQVGqsgWhlmSm5cHCuy5XDtaFyC/qxfoDXqaQOyCqwDi:cuDtFsVvmTeuXDEf/jDX9QOyCqB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_007ba442f5b2c76a737322525c270aa6
Files
-
VirusShare_007ba442f5b2c76a737322525c270aa6.exe windows:4 windows x86 arch:x86
0fbb582a0ef19f144497e1f6b5fb5ca6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ole32
CoUninitialize
CoInitialize
CoCreateInstance
StringFromGUID2
CoCreateGuid
CoSetProxyBlanket
kernel32
GetModuleHandleA
HeapReAlloc
GetProcessHeap
GetThreadPriority
InterlockedIncrement
InitializeCriticalSection
GetUserDefaultLCID
MultiByteToWideChar
DeleteCriticalSection
GetCurrentDirectoryW
IsDebuggerPresent
RaiseException
Sleep
LCMapStringA
WriteConsoleA
SetCommConfig
HeapSize
GlobalAlloc
EnterCriticalSection
SetEndOfFile
GetCurrentThreadId
SetStdHandle
GetVersionExA
GetFullPathNameW
GetProcAddress
InterlockedDecrement
GetCommandLineA
GetConsoleOutputCP
EnumResourceNamesA
WriteConsoleW
GetCPInfo
GetModuleFileNameW
ExitProcess
IsValidLocale
ExitProcess
IsValidCodePage
UnhandledExceptionFilter
RtlUnwind
HeapFree
GetLastError
WriteFile
ReadFile
CloseHandle
SetUnhandledExceptionFilter
TerminateProcess
WideCharToMultiByte
LCMapStringW
EnumSystemLocalesA
LeaveCriticalSection
HeapAlloc
CreateFileA
GetLocaleInfoW
GetCurrentProcess
GetFullPathNameA
shell32
SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW
user32
GetClassLongA
MessageBoxW
rpcrt4
UuidCreate
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
Sections
.text Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ