VirusShare-001afbb40ad62b7826073f6c69ca0166 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare-001afbb40ad62b7826073f6c69ca0166
Size

76KB
MD5

001afbb40ad62b7826073f6c69ca0166
SHA1

129af6b83cc78d2d9b42b4876cd34fe6c0163246
SHA256

870584c03c6721a5fe735efc9927dde06abf0b9c4b17df2ead33767545469990
SHA512

9200dee49870d1b2c47e3e0ad04715fcbba74761a4f752ff8022c386857380ba15ffac3c4ea77b05a09a31f111d20958821796af1bbe87ec98ba132369a2b6e0
SSDEEP

1536:AaWhB3UT8Ew33E9aIKH6cLq3jZlpuUBEaKjDiBRrPfpjVrs2ryrd1vUQuq6:9WhB28nnmBKH6cu1SwPfHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare-001afbb40ad62b7826073f6c69ca0166

Files

VirusShare-001afbb40ad62b7826073f6c69ca0166
.exe windows:4 windows x86 arch:x86

ccf0b2d96e5d3f94df178073604adb80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryLengthA
GetFullPathNameA
GetCurrentThread
ReplaceFileA
SuspendThread
CallNamedPipeW
SetHandleInformation
QueryMemoryResourceNotification
HeapSize
LoadResource
GetProcessWorkingSetSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE