VirusShare_c5b0f786fe68a4312307535890ba01e4[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

VirusShare_c5b0f786fe68a4312307535890ba01e4.exe
Size

53KB
MD5

c5b0f786fe68a4312307535890ba01e4
SHA1

ca15010a195cdfdf0af95f2c2543930311142994
SHA256

91450f9e8aeb0361867cdefc0bb7e5bad8941b5081db549d34a91072df4db5dc
SHA512

b510164ff1c47c198945ab51d8fa2b9d77ebf44b817286c031514554273f7b7d82a85f8932c2b33bd564e7a86277f056689cd33603b5b1d52a37c39dad6b8b55
SSDEEP

1536:zNPTkHhFRy2/NSTEj1FVl1Ft9N1FVl1FVFS0TztlY27VqmSVzyqYvd0bRPp24dfv:hIHhFR//NSTXYztlY27VqmSVzyqYvd0j

Score

1^/10

Malware Config

Signatures

Files

VirusShare_c5b0f786fe68a4312307535890ba01e4.exe
.exe windows x64

c6245913beba052525a6c0ed94e44ff0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetSystemInfo
ExitProcess
GlobalMemoryStatusEx
CreateProcessW
RtlLookupFunctionEntry
GetLastError
GetModuleFileNameW
DeviceIoControl
GetDriveTypeW
GetCurrentDirectoryW
GetLogicalDriveStringsW
FindNextFileW
FindFirstFileW
LocalFree
CloseHandle
DeleteFileW
CreateFileW
LocalAlloc
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
RtlCaptureContext
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentThread
WriteFile
ReadFile

advapi32

CryptEncrypt
CryptGenKey
CryptImportKey
LookupPrivilegeValueW
AdjustTokenPrivileges
ImpersonateSelf
OpenThreadToken
CryptDestroyKey
CryptAcquireContextW
CryptSetKeyParam
CryptExportKey
CryptReleaseContext

shell32

ShellExecuteW

msvcp140

_Thrd_id
_Cnd_wait
_Thrd_join
?_Throw_Cpp_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
_Cnd_signal
?_Xout_of_range@std@@YAXPEBD@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_lock
_Cnd_init_in_situ
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Cnd_destroy_in_situ
_Cnd_do_broadcast_at_thread_exit
_Mtx_unlock
_Thrd_hardware_concurrency

crypt32

CryptStringToBinaryA
CryptDecodeObjectEx

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException
memset
__std_exception_copy
__std_exception_destroy
__current_exception
__current_exception_context
__C_specific_handler
memcpy
memmove

api-ms-win-crt-heap-l1-1-0

_set_new_mode
malloc
_callnewh
free

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
exit
_get_initial_narrow_environment
_seh_filter_exe
_initterm_e
_initialize_onexit_table
_cexit
_set_app_type
_exit
_initialize_narrow_environment
_configure_narrow_argv
_crt_atexit
terminate
system
_beginthreadex
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_initterm

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__p__commode
_set_fmode

api-ms-win-crt-filesystem-l1-1-0

_wchdir

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c6245913beba052525a6c0ed94e44ff0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

msvcp140

crypt32

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 18KB - Virtual size: 17KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 512B - Virtual size: 3KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 512B - Virtual size: 3KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB