VirusShare_2098eaf8a3cab3064ebaacb5bfc9c48f

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_2098eaf8a3cab3064ebaacb5bfc9c48f
Size

341KB
MD5

2098eaf8a3cab3064ebaacb5bfc9c48f
SHA1

14ca3ef01dff8a6a28be6cf481dde7b5e767314c
SHA256

cdb600826cc5665527f31d4080a673f2eed65f3940654599db98ee24b5c5207b
SHA512

9a2128d0a171dbb095164a2125043d3039d5dd76fb678d359d1e99c0d36f032a52fa4f16430f5620da2159eb39b804896524026ff8b952f19d15a0a71d4ad5c7
SSDEEP

6144:bPB+ktEbwe2i+mmzMSu2nlerflIZvZTNVDoqs20:1VEGloblIpZB5om0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_2098eaf8a3cab3064ebaacb5bfc9c48f

Files

VirusShare_2098eaf8a3cab3064ebaacb5bfc9c48f
.exe windows:5 windows x86 arch:x86

7f43b38339a49c9d9879e320d3ff598c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconW
LoadCursorW
SetWindowTextW
LoadBitmapW
ExitWindowsEx
BringWindowToTop
GetSubMenu
GetMenuItemCount
RegisterClassExW
GetMenuState
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetParent
SendMessageW
GetWindowThreadProcessId
MapDialogRect
SetWindowContextHelpId
GetMenuItemID
IsRectEmpty
GetWindowLongA
GetMenuStringA
LoadMenuA
SetScrollPos
LoadBitmapA
DialogBoxParamW
GetCaretBlinkTime
IsWindowUnicode
ModifyMenuA
LoadImageW
GetMenuContextHelpId
GetClipboardFormatNameW
VkKeyScanExA
GetAltTabInfoA
DeferWindowPos
GetWindowTextLengthA
EndDeferWindowPos
GetComboBoxInfo
CreateIconFromResourceEx
GetUserObjectInformationW
MonitorFromWindow
ScrollWindowEx
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
SetActiveWindow
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetMenu
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CallWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
MessageBeep
IsChild
GetTopWindow
GetNextDlgTabItem
GetNextDlgGroupItem
ReleaseCapture
GetDesktopWindow
SetCapture
GetClientRect
GetWindowRect
SetCursor
SetRect
CreateWindowExW
CopyAcceleratorTableW
OffsetRect
PtInRect
CharNextW
GetFocus
SetFocus
MoveWindow
GetDlgCtrlID
IsWindow
IsDialogMessageW
SendDlgItemMessageW
GetDlgItem
CharUpperW
SetWindowsHookExW
CallNextHookEx
GetActiveWindow
GetKeyState
GetCursorPos
GetWindowTextW
GetSysColorBrush
UnhookWindowsHookEx
IntersectRect
CopyRect
GetSysColor
GetWindowDC
GetDC
ClientToScreen
RegisterClipboardFormatW
InvalidateRgn
MessageBoxW
LoadStringW
RedrawWindow
GetSystemMetrics
DrawStateW
PostThreadMessageW
InvalidateRect
SystemParametersInfoW
EndPaint
ReleaseDC
DrawTextW
BeginPaint
SetForegroundWindow
DestroyMenu
EndDialog
CreateDialogIndirectParamW
UnregisterClassA
EqualRect
ShowWindow
SetWindowPos
IsWindowVisible
ValidateRect
DefWindowProcW
GetWindowLongW
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
PostMessageW
PeekMessageW
SetWindowLongW
GrayStringW
DrawTextExW
TabbedTextOutW
PostQuitMessage
GetWindow

shell32

SHGetFileInfoA

ole32

CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleFlushClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRegisterMessageFilter
CoTaskMemAlloc
OleIsCurrentClipboard
CoTaskMemFree

advapi32

RegCloseKey
RegEnumValueA
RegEnumKeyExA
LookupPrivilegeValueW
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegDeleteKeyW
RegSetValueExW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
AdjustTokenPrivileges
RegQueryValueExW
OpenProcessToken
RegOpenKeyW
RegEnumKeyW
RegQueryValueW
RegOpenKeyExW

gdi32

SetBrushOrgEx
GetMetaFileBitsEx
ResizePalette
CreateFontIndirectW
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
DPtoLP
ScaleViewportExtEx
CreateBitmap
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetViewportExtEx
SetWindowOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetClipBox
SetMapMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
GetObjectW
SetBkMode
GetStockObject
DeleteObject
SetTextColor
SelectObject
GetICMProfileA
AnimatePalette
GdiGradientFill
PatBlt
RealizePalette
GetCharABCWidthsW
PolyDraw
FillPath
GetArcDirection
SetBoundsRect
GetCharWidthW
StrokePath
ExcludeClipRect
GetCharWidthA
GetViewportOrgEx
SetGraphicsMode
Rectangle
StretchBlt
SetStretchBltMode
SetTextAlign
OffsetViewportOrgEx
CheckColorsInGamut

crypt32

CryptMsgGetParam
CertFreeCertificateContext
CertOIDToAlgId

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

SetFilePointer
GetExitCodeProcess
CreatePipe
GetFileAttributesA
CreateProcessA
MoveFileA
DeleteFileA
GetLogicalDriveStringsW
ResetEvent
FormatMessageA
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
CompareStringA
lstrcmpW
GlobalDeleteAtom
SetErrorMode
GetModuleHandleW
FreeResource
GetCurrentProcessId
lstrlenA
GlobalFree
GetDriveTypeA
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
MulDiv
SetLastError
GetExitCodeThread
GetDriveTypeW
WideCharToMultiByte
CreateEventW
SetEvent
GetModuleHandleA
GetCurrentProcess
GetVersionExW
GetProcAddress
LoadLibraryExW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetLocaleInfoW
GetSystemDefaultLCID
GetEnvironmentVariableW
GetCommandLineW
CreateDirectoryW
RemoveDirectoryW
GetSystemDirectoryW
GetWindowsDirectoryW
GetTempPathW
GetCurrentDirectoryW
GetDiskFreeSpaceExW
GetFullPathNameW
CopyFileW
DeleteFileW
SetFileAttributesW
GetFileAttributesW
MultiByteToWideChar
SetEndOfFile
LoadLibraryW
FreeLibrary
CreateFileW
GetCurrentDirectoryA
CreateFileA
SetEnvironmentVariableW
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
IsValidLocale
EnumSystemLocalesA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
FlushFileBuffers
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapSize
GetFileType
SetStdHandle
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
RtlUnwind
RaiseException
GetLocaleInfoA
GetACP
GetTickCount
GlobalFlags
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GetFileTime
GetVolumeInformationW
DuplicateHandle
GetFileSize
UnlockFile
LockFile
EncodePointer
FlushInstructionCache
MapUserPhysicalPages
FlushViewOfFile
IsBadCodePtr
CompareFileTime
GetSystemDirectoryA
GetProcessAffinityMask
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
GlobalAlloc
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
WriteFile
SizeofResource
LCMapStringW
LockResource
LoadResource
FindResourceW
Sleep
GetLastError
GetModuleFileNameW
CloseHandle
WaitForSingleObject
CreateThread
SetCurrentDirectoryW
GetSystemDefaultLangID
GetUserDefaultLCID
GetCurrentThreadId
ReleaseMutex
CreateMutexW
FindResourceExW
SetFilePointerEx
ReadFile

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hyhdhya
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.okololo
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pumpitu
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f43b38339a49c9d9879e320d3ff598c

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

advapi32

gdi32

crypt32

version

kernel32

Sections

.text Size: 116KB - Virtual size: 116KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 26KB - Virtual size: 353KB

.hyhdhya Size: 3KB - Virtual size: 3KB

.okololo Size: 2KB - Virtual size: 2KB

.pumpitu Size: 3KB - Virtual size: 3KB

.rsrc Size: 171KB - Virtual size: 171KB

.text
Size: 116KB - Virtual size: 116KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 26KB - Virtual size: 353KB

.hyhdhya
Size: 3KB - Virtual size: 3KB

.okololo
Size: 2KB - Virtual size: 2KB

.pumpitu
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 171KB - Virtual size: 171KB