VirusShare-0001617ffcd2415814904556ba2252d8

Sharing

Copy URL

Twitter E-mail

General

Target

VirusShare-0001617ffcd2415814904556ba2252d8
Size

40KB
MD5

0001617ffcd2415814904556ba2252d8
SHA1

48f01e88dee8b4aafe94f16a40b5f93f1dad733c
SHA256

764f72a474ddb567d75d5f13b8f27cd21121f8738781ed07aabb90bc6e88d443
SHA512

f02251d9d638cb3bedb32a06b5bb6d146443202e6ad8ef8300603806be7bef28c17656a5215e2438b42771be49422cc26099fb00c91fb422affbe50bef99db2a
SSDEEP

768:mx6dvSzqI/L7V941HQNs5KWLN/RrJ7SHYrxi1T:m8dKzJL7VC1is9LN/xgWQ1T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare-0001617ffcd2415814904556ba2252d8

Files

VirusShare-0001617ffcd2415814904556ba2252d8
.exe windows:4 windows x86 arch:x86

8b0b71896f4156ce371d123ef428b588

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord4202
ord6283
ord860
ord540
ord825
ord537
ord858
ord356
ord2770
ord2820
ord2781
ord3010
ord2822
ord668
ord800
ord3811
ord2763
ord5683
ord4278
ord6662
ord4129
ord823
ord535

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
?terminate@@YAXXZ
_except_handler3
__dllonexit
malloc
strcmp
_mbsrchr
time
srand
rand
strncpy
memset
strcat
fprintf
strstr
atoi
getenv
_findfirst
_findnext
strcpy
_findclose
strlen
_EH_prolog
__CxxFrameHandler
sprintf
fopen
fgets
_mbscmp
fclose
_onexit

kernel32

GetModuleHandleA
SleepEx
GetModuleFileNameA
CopyFileA
CreateProcessA
MultiByteToWideChar
ResumeThread
SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
CloseHandle
WriteFile
lstrlenA
lstrcpyA
CreateFileA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
LoadLibraryA
FreeLibrary
GetProcAddress
GetStartupInfoA
DeleteFileA
Sleep

user32

GetClassNameA
MessageBoxA
EnumChildWindows
GetDesktopWindow
wsprintfA
SendMessageA

advapi32

RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA

ole32

CoInitialize
CoCreateInstance

urlmon

URLDownloadToFileA

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b0b71896f4156ce371d123ef428b588

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

advapi32

shell32

ole32

urlmon

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 8KB - Virtual size: 6KB