VirusShare_b1e80ba8cd43ec19ecf148fb508cc580

Sharing

Copy URL

Twitter E-mail

General

Target

VirusShare_b1e80ba8cd43ec19ecf148fb508cc580
Size

144KB
MD5

b1e80ba8cd43ec19ecf148fb508cc580
SHA1

f30dccc76f5622133a2550aefd39e82bb8991789
SHA256

1a174040f0f486f90be1d58a9b7a8ec511c4af4c65cf9d9793c3ae134ee099df
SHA512

57218b066a3f83ac03853734f524ad31fa8abad18e1ae95fb37cd3998e2d5fb24a62b5c53ace06150b79d4863b4b209ff1301a4cbb3d581f7773b7ed857fbe6c
SSDEEP

3072:uN7ngdDE9Ryv9HeVVcQ6xhcTLSfgxrUJkOWixDurpDQj:GngK6AyQ62S4xrUJkOW+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_b1e80ba8cd43ec19ecf148fb508cc580

Files

VirusShare_b1e80ba8cd43ec19ecf148fb508cc580
.dll windows:4 windows x86 arch:x86

a67ceccc019926c1f8cee6e23d31227a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Option\Previous\Must.pdb

Imports

kernel32

GetSystemTime
GetExitCodeThread
SetConsoleMode
GetFileType
GetModuleHandleW
lstrcmpiW
DeleteCriticalSection
InitializeCriticalSection
GetLastError
LocalReAlloc
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
PulseEvent
SystemTimeToFileTime
GetEnvironmentVariableW
GetStartupInfoW
SetUnhandledExceptionFilter
EnterCriticalSection
ReadFile
SetFilePointer
CreateFileW
GetComputerNameExW
GetVersionExW
LeaveCriticalSection
GetConsoleWindow
lstrcmpW
CompareFileTime
GetACP
LocalAlloc
GetSystemTimeAsFileTime
LocalFree
GetFileAttributesW
WriteFile
FreeLibrary
FileTimeToSystemTime
LocalFileTimeToFileTime
GetTimeFormatW
FindClose
FindFirstFileW
RemoveDirectoryW
CreateDirectoryW
FoldStringW
GetCurrentThread
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetSystemInfo
GetEnvironmentVariableA
WideCharToMultiByte
OpenEventW
LoadLibraryA
InterlockedExchange
GetProcAddress
RaiseException

advapi32

GetTokenInformation
AdjustTokenPrivileges
RegCreateKeyExW
AddAccessDeniedObjectAce
OpenThreadToken
LookupAccountNameW
RegOpenKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
GetSecurityDescriptorLength
RegCreateKeyW
GetSecurityDescriptorDacl
AddAce
InitializeAcl
GetAclInformation
GetAce
AddAccessAllowedAce
AddAccessDeniedAce
RevertToSelf
ImpersonateSelf
LookupAccountSidW
RegSetValueExW

msvcrt

strstr
fputs
fseek
strcspn
fclose
atol
isdigit
swscanf
iswdigit
wcscspn
wcscmp
wcschr
malloc
free
fgetws
fgetc
fwrite
vfwprintf
gmtime
wcscpy
wcscat
memmove
exit
swprintf
fprintf
wcslen

Exports

Exports

AllNameAn
AndColumnSyntaxIs
ButSpaceA
ForASame
IntoThereAlways
OptionIsAround
RunBooleanInNameSection
SingleSignificantTheLineA
SubversionParticularAreAnAre
WhichOfConfiguration

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a67ceccc019926c1f8cee6e23d31227a

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 60KB - Virtual size: 57KB

.data Size: 24KB - Virtual size: 190KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 60KB - Virtual size: 57KB

.data
Size: 24KB - Virtual size: 190KB

.reloc
Size: 4KB - Virtual size: 1KB