VirusShare_718bb1d020aa0b2e6d8d93c3d60a0ec1

Sharing

Copy URL

Twitter E-mail

General

Target

VirusShare_718bb1d020aa0b2e6d8d93c3d60a0ec1
Size

120KB
MD5

718bb1d020aa0b2e6d8d93c3d60a0ec1
SHA1

028fa93c0905aee8473d17ad48ecc52acc298f18
SHA256

af1748c670f0cae66c68d1839477cda572f4979cc877a4270c54237551bf4ad0
SHA512

50e4a5ecd11b7a035b999c93935611953c35f223f346b029fca99452a21c69d793cbc256cf2989957bf663f1ae8fce1c32a17c1f967e87846bd9c5278eba9cd6
SSDEEP

3072:LbRPCx+f8DfPsxb/EtLZCH8WDinocw3YieAzFi:LbZ2U/EtL6vGwtzF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_718bb1d020aa0b2e6d8d93c3d60a0ec1

Files

VirusShare_718bb1d020aa0b2e6d8d93c3d60a0ec1
.dll windows:4 windows x86 arch:x86

930bd9a7e591f0c21241271489994f1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetLocaleInfoW
LoadResource
FindResourceA
SetEnvironmentVariableA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
RtlUnwind
SetStdHandle
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
UnhandledExceptionFilter
HeapAlloc
FatalAppExitA
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleHandleA
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
ExitProcess
GetCommandLineA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
CompareStringA
CompareStringW
GetLocalTime
WriteFile
GetTempPathA
GetTempFileNameA
CreateFileA
OpenFileMappingA
MapViewOfFile
WaitForMultipleObjects
OpenEventA
WaitForSingleObject
SetEvent
ResetEvent
ReleaseMutex
UnmapViewOfFile
IsBadWritePtr
GetModuleFileNameA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
IsBadReadPtr
GetWindowsDirectoryA
GetVersion
CreateProcessA
GetVersionExA
OpenMutexA
Sleep
CloseHandle
OutputDebugStringA
DisableThreadLibraryCalls

user32

FindWindowA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Exports

Exports

eeoAyiuRw

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

930bd9a7e591f0c21241271489994f1e

Headers

File Characteristics

Imports

kernel32

user32

version

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.data Size: 103KB - Virtual size: 423KB

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 13KB - Virtual size: 13KB

.data
Size: 103KB - Virtual size: 423KB

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 2KB - Virtual size: 1KB