VirusShare_221d932a683df7ac527fc7ff747f82d8

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_221d932a683df7ac527fc7ff747f82d8
Size

320KB
MD5

221d932a683df7ac527fc7ff747f82d8
SHA1

f19cfba63db2873bbf0b1e5a3b9b9c036fedc81c
SHA256

ecc012e3dd8cd3fb2eee0da23c8797e660ef1092cca42ac6fb7cdde44f5ad426
SHA512

cdeb90ecd4e8bda913f300c58b3e9895a49adb03c129c598921a49930ef330dc000859d4e9a8fb188c19815d3bcc4872669ead8035a17788beda88d90ec90d39
SSDEEP

6144:DSNraNeJ4BP+JkOFF+DSkB3wsKsr1aY9EpZK:8rUi4w12RBAqr1zgK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_221d932a683df7ac527fc7ff747f82d8

Files

VirusShare_221d932a683df7ac527fc7ff747f82d8
.exe windows:5 windows x86 arch:x86

507219112046bea517b584e84c8c29fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
WriteConsoleW
SetStdHandle
LoadLibraryW
HeapSize
RtlUnwind
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
LCMapStringW
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
ExitProcess
GetModuleHandleW
GetStringTypeW
HeapReAlloc
CreateFileW
FlushFileBuffers
GetTempPathA
CloseHandle
CreateToolhelp32Snapshot
Process32Next
GetTempFileNameA
GetLastError
lstrlenW
ExitThread
HeapCreate
WriteFile
GetProcessHeap
GetTickCount
Process32First
HeapFree
CreateFileA
GetProcAddress
GetCurrentProcess
HeapAlloc
lstrlenA
QueryPerformanceCounter
IsProcessorFeaturePresent
DecodePointer
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA

user32

FindWindowA
UpdateWindow
SendMessageW
MoveWindow
SetScrollInfo
IsWindow
AppendMenuA
GetSysColorBrush
CreatePopupMenu
ShowWindow
GetSystemMetrics
GetScrollPos
IsWindowVisible
LoadStringW
GetCursorPos
EndPaint
SetTimer
GetWindowRect
PostQuitMessage
TrackPopupMenu
FillRect
KillTimer
DrawTextA
SetForegroundWindow
LoadStringA
LoadBitmapA
GetParent
GetClientRect
BeginPaint
GetDC
GetForegroundWindow
LoadIconW
MessageBoxA
InvalidateRect
GetWindowLongA
CreateWindowExA
ReleaseDC
CharUpperW
EndDialog
DefWindowProcA
GetSysColor

gdi32

BitBlt
GetLayout
GetTextExtentPoint32W
GetTextMetricsW
GetTextExtentPoint32A
SetTextColor
DeleteDC
CreateFontIndirectW
CreateFontIndirectA
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
CreateBrushIndirect
SaveDC
GetTextExtentPointW
CreatePen
GetObjectA
GetStockObject
RestoreDC
CreateSolidBrush
TextOutA

winspool.drv

ClosePrinter

shell32

Shell_NotifyIconA
ord100

ole32

CoUninitialize
CoTaskMemFree
CoInitializeEx
CoCreateInstance

ws2_32

WSAStartup
WSACleanup
WSCEnumProtocols

shlwapi

StrCpyNW

gdiplus

GdipSaveImageToFile
GdiplusShutdown
GdipFree
GdipLoadImageFromFile
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipAlloc

Sections

.text
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

507219112046bea517b584e84c8c29fc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

shell32

ole32

ws2_32

shlwapi

gdiplus

Sections

.text Size: 289KB - Virtual size: 289KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 5KB - Virtual size: 21KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 289KB - Virtual size: 289KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 5KB - Virtual size: 21KB

.rsrc
Size: 10KB - Virtual size: 9KB