VirusShare_8e9ba382a59e48a5ee3ad7a1cea0cb93

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_8e9ba382a59e48a5ee3ad7a1cea0cb93
Size

220KB
MD5

8e9ba382a59e48a5ee3ad7a1cea0cb93
SHA1

0aaa24eb77f04077d7176ebaf78b315515724844
SHA256

e25d2ffb882cfe28089477c25c2141b201df5efe94481295597e4733a1d90a39
SHA512

278d7ff206c55c91c7b334a0c0cc09632b61ba39073ff011c16319fe3f223ee3e6a09e761834f6016a7d06487104f9949ebd7cee4f8dd2f2593d22023eb1f348
SSDEEP

3072:OrTXYKNP2u2HZE2t942cGCPFDShoWG6d/yXfZqhyBQ+LleqfK9NeeS1auV4nrW:OPYKNP2VH+CbcGWHHQ2QqfK+JAS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_8e9ba382a59e48a5ee3ad7a1cea0cb93

Files

VirusShare_8e9ba382a59e48a5ee3ad7a1cea0cb93
.dll windows:5 windows x86 arch:x86

b54bf3c3cc515814fc57588f3fd12b6a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
LoadLibraryExA
GetProcessHeap
EnterCriticalSection
lstrlenW
FreeLibrary
GetModuleFileNameA
InterlockedIncrement
GetUserDefaultLCID
lstrcatA
lstrlenA
SetStdHandle
GetConsoleOutputCP
GetCurrentThreadId
CloseHandle
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LoadLibraryExW
OutputDebugStringW
WriteConsoleW
DebugBreak
VirtualQuery
GetLastError
HeapDestroy
DisableThreadLibraryCalls
WriteConsoleA
WaitForSingleObject
GetSystemInfo
VirtualProtect
RtlUnwind
HeapReAlloc
VirtualAlloc
HeapAlloc
InitializeCriticalSection
GetCommandLineA
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
GetProcAddress
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
HeapValidate
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
FatalAppExitA
OutputDebugStringA
GetModuleFileNameW
GetLocaleInfoA
WriteFile
CreateFileA

user32

UnionRect
DispatchMessageA
LoadStringA
SetWindowRgn
PtInRect
TranslateMessage
IntersectRect
RegisterClassExA
OffsetRect
SetFocus
UnregisterClassA
GetParent
CreateWindowExA
wsprintfA
GetClassInfoExA
SetWindowPos
MsgWaitForMultipleObjects

gdi32

RestoreDC
DeleteMetaFile
SaveDC
LPtoDP

ws2_32

WSAStartup
closesocket
shutdown
recv
ioctlsocket
select
send
connect

Exports

Exports

Kfjshflsj3

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 410KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b54bf3c3cc515814fc57588f3fd12b6a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ws2_32

Exports

Exports

Sections

.text Size: 90KB - Virtual size: 89KB

.rdata Size: 33KB - Virtual size: 33KB

.data Size: 84KB - Virtual size: 410KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 90KB - Virtual size: 89KB

.rdata
Size: 33KB - Virtual size: 33KB

.data
Size: 84KB - Virtual size: 410KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 9KB - Virtual size: 8KB