VirusShare_40f0591b4358892427511912cfdbac30 | Triage

Sharing

General

Target

VirusShare_40f0591b4358892427511912cfdbac30
Size

231KB
MD5

40f0591b4358892427511912cfdbac30
SHA1

d7c1c433c3ca226b45d29702bc4e9ab9dce6d490
SHA256

e2588c8d586b06cfc67d4965b3d96569fe2901d162870b8350e22fc6fa208d29
SHA512

07d4bdf05d908b6e4ed36889ece47afbe50d248916db73955fe8383a7a8f6d533e97ac9759f95449efc243c1ae519ba5c36633c6c83fce9bb68792942d02bfb2
SSDEEP

3072:WU9c3m/nCxPbWeI/g0LxXtsyqILo0nuHM0/K0JpcHPt93gmrWA5YLbBvDVR6Nnd:d9/+W1o0No1sd07cvPhrWXLbBvhIb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_40f0591b4358892427511912cfdbac30

Files

VirusShare_40f0591b4358892427511912cfdbac30
.dll windows:4 windows x86 arch:x86

b25cae5fd62b8d921e5319fff544d910

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

UnhandledExceptionFilter
DisableThreadLibraryCalls
CloseHandle
CreateFileA
IsBadStringPtrA
Sleep

user32

GetWindowTextA
FindWindowA

ole32

CoInitializeEx
CoUninitialize

msvcrt

wcsncmp

shlwapi

PathCombineA

Exports

Exports

AOfClasses
BeToTheTheIn
ItItWherebyWwwStandards
JavaPackages
JcpStandardsOf
MechanismOfA
PlatformLaterIntoInterfacesThe
SMOnUpdateMeans
TechnologiesOutside
TheCorrespond
TheEndorsedOverrideMechanism
VersionsToIncludingJCPBe

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 974B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ