VirusShare-001747dba7f3ffbfaf48adf818826d36

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare-001747dba7f3ffbfaf48adf818826d36
Size

172KB
MD5

001747dba7f3ffbfaf48adf818826d36
SHA1

65c840ee97c0f098fb9d16f792ee4373383d2733
SHA256

e97701e4109395c21114e437787b12c5bb253d298e0980d75eb254c0f48ac72f
SHA512

1e8fcd5f1b1ec50f31321982f662dbfb6842fe54014476fe0ffd042017d975f6f68a7eadbd269b2a7fb87065e0dcadac96a50f34b9d61dbb1a957475966f9730
SSDEEP

3072:EfjbSlLMHPUZyr+vlsN2jLjap6HMo3M6NwDaZQaFsHKLtLRLQOjcP2yZRmVw3Nph:GjbSlLMHPUZyr+vlsN2jLjap6HMo3M6l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare-001747dba7f3ffbfaf48adf818826d36

Files

VirusShare-001747dba7f3ffbfaf48adf818826d36
.exe windows:4 windows x86 arch:x86

832e3dffd3b0ddfa26130e9e6aaa9726

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
SetErrorMode
GetCurrentProcess
WriteFile
SetFilePointer
FlushFileBuffers
GetCPInfo
GetOEMCP
RtlUnwind
GetTimeZoneInformation
GetSystemTime
UpdateResourceA
GetCommandLineA
ExitProcess
LocalReAlloc
GetProcessVersion
GetCurrentThread
HeapReAlloc
HeapSize
GetACP
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
GetProfileStringA
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
TlsFree
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
GlobalFlags
LocalAlloc
SizeofResource
lstrcpynA
GetLastError
CloseHandle
lstrcmpA
GetModuleFileNameA
GlobalAlloc
HeapAlloc
HeapFree
GetModuleHandleA
FreeLibrary
LocalFree
SetLastError
MulDiv
lstrlenA
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
lstrcatA
InterlockedIncrement
GetVersion
lstrcmpiA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
GlobalLock
lstrcpyA
GetProcAddress
LockResource
GlobalUnlock
GlobalFree
LoadLibraryA
FindResourceA
LoadResource
RaiseException
EndUpdateResourceA
TerminateProcess
BeginUpdateResourceA
GetLocalTime
GetStartupInfoA
CopyFileA

user32

GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
PostMessageA
CheckDlgButton
PeekMessageA
SetDlgItemTextA
IsDlgButtonChecked
IsDialogMessageA
SetWindowTextA
ShowWindow
SetMenuItemBitmaps
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
DestroyMenu
GetFocus
DispatchMessageA
SetCursor
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
InvalidateRect
SetFocus
InflateRect
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
PostQuitMessage
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
SetWindowsHookExA
CallNextHookEx
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
IsWindowEnabled
CharNextA
IsWindowUnicode
ShowCaret
EnableWindow
CheckMenuItem
GetMenuState
GetMenu
EnableMenuItem
DrawMenuBar
RedrawWindow
IsIconic
GetSystemMetrics
DrawIcon
HideCaret
LoadIconA
CreateWindowExA
GetDlgItem
GetClientRect
SendMessageA
LoadStringA
GetClassLongA
SetPropA
GetKeyState
UnregisterClassA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

comctl32

ord17

gdi32

SetTextColor
SetBkColor
GetObjectA
CreateDIBitmap
CreateCompatibleDC
BitBlt
GetTextExtentPointA
PatBlt
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SaveDC
DeleteDC
SelectObject
GetStockObject
RestoreDC
SetBkMode
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
IntersectClipRect
DeleteObject
GetDeviceCaps
CreateSolidBrush
CreateBitmap
GetClipBox

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

832e3dffd3b0ddfa26130e9e6aaa9726

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

comctl32

gdi32

winspool.drv

advapi32

Sections

.text Size: 116KB - Virtual size: 114KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 116KB - Virtual size: 114KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 12KB - Virtual size: 9KB