shvlzm[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

shvlzm.exe
Size

91KB
MD5

f2f29d23b3ffd02b2ef62d338601ca27
SHA1

9653efcf1ced9165e7a64cc6098dc68c01f1f556
SHA256

9e8e11e1de72c9ad2ca0abf7eac2c6517094119d8b5ace122fcbdf950b90a755
SHA512

2d957dd726908baaaf3626b659599d946f87ddfe229db94eac3f1df5b28754c03712e10b98a5436f0712cd65448f4ac1cde345139a10ad1b04ef128566bd3883
SSDEEP

1536:W41dYqx0evX6Mh+t44SFzM7C1qP+tVElXB/Mu2NT1DdrHKbclOK2a:W41dH4MQUzMWAP6VElR/Mu2lZdmYl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
shvlzm.exe

Files

shvlzm.exe
.exe windows:6 windows x86

1b2401c17ab43833e46d62889e33a886

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
EventRegister
EventUnregister

msvcrt

_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
_controlfp
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
??3@YAXPAX@Z
_exit
_cexit
__getmainargs
__p__commode

comctl32

InitCommonControlsEx

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysAllocString
SysFreeString

kernel32

GetModuleFileNameW
CloseHandle
LoadLibraryW
GetLastError
CreateMutexW
CreateEventW
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
UnhandledExceptionFilter
FormatMessageW
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
TerminateProcess
FreeLibrary

gdi32

DeleteObject

user32

FindWindowW
IsWindowVisible
ShowWindow
BringWindowToTop
SetForegroundWindow
PeekMessageW
MsgWaitForMultipleObjects
LoadStringW
MessageBoxW

cmnclim

DisplayFatalApplicationErrorMessage
CreateZoneShell

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b2401c17ab43833e46d62889e33a886

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

msvcrt

comctl32

ole32

oleaut32

kernel32

gdi32

user32

cmnclim

Sections

.text Size: 12KB - Virtual size: 11KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 76KB - Virtual size: 75KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 76KB - Virtual size: 75KB

.reloc
Size: 1KB - Virtual size: 1KB