VirusShare_1a63c268a76b3eec8676706e39609cd6

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_1a63c268a76b3eec8676706e39609cd6
Size

532KB
MD5

1a63c268a76b3eec8676706e39609cd6
SHA1

8e553f015e3c0f81492ded79369cf5d9db6ae465
SHA256

76c21f2d29b9e19861395bd409e39bcd536ffe476f9849562c697bcb73e6ba0e
SHA512

257849a86dcdb634b7920bae541d49a80da79c2d18682d934fa3f704893e284a77a0414055599dc602d08e861afa556cf47637b5f7b57060f635de7f607ced05
SSDEEP

6144:b/J/ETvAZfVVHb25oM+SaplO5gTUVi/gMH6Ai5yOSAc9SY3au81rKBh38BkJVk9u:baT8VUuMXanO5M1TH6Ai8AyYukS3KuY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_1a63c268a76b3eec8676706e39609cd6

Files

VirusShare_1a63c268a76b3eec8676706e39609cd6
.exe windows:4 windows x86 arch:x86

bfad845f3ce3325867e000a143c2b425

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
GetCurrentProcess
CreateThread
InitializeCriticalSection
FormatMessageW
SetEvent
CloseHandle
GetTickCount
WaitForSingleObject
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
lstrcpynA
GetModuleHandleA
LocalReAlloc
GetSystemDefaultLangID
GetVersionExA
FileTimeToSystemTime
FileTimeToLocalFileTime
InterlockedExchange
lstrlenA
DuplicateHandle
FreeLibrary
GetProcAddress
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
DeleteCriticalSection
LocalAlloc
LocalFree
TerminateThread
WideCharToMultiByte
GetUserDefaultLCID
AreFileApisANSI
IsBadReadPtr
LoadLibraryA
LoadLibraryW
CreateEventA
CreateEventW
GetDateFormatA
GetDateFormatW
GetTimeFormatA
GetTimeFormatW
FormatMessageA
GetLocaleInfoW
WaitForMultipleObjects
GetLastError

user32

RedrawWindow
GetDC
SetRect
ReleaseDC
GetSysColor
FillRect
CallWindowProcW
IsWindowVisible
KillTimer
SetTimer
InvalidateRect
DrawIcon
DrawAnimatedRects
GetWindowRect
MapWindowPoints
SetWindowPos
GetSystemMetrics
GetClientRect
SystemParametersInfoA
SetForegroundWindow
UpdateWindow
GetDlgItem
IsWindowEnabled
GetFocus
EnableWindow
SetFocus
SendMessageA
DefDlgProcW
DefDlgProcA
GetWindowLongA
SetWindowLongA
wsprintfW
GetMessageA
PostMessageA
MsgWaitForMultipleObjects
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
AttachThreadInput
FindWindowA
FindWindowW
SetWindowTextA
SetWindowTextW
WinHelpA
WinHelpW
RegisterWindowMessageA
SetCursor
GetParent
GetUserObjectInformationW
GetThreadDesktop
GetProcessWindowStation
DefWindowProcW
LoadStringA
LoadStringW
FindWindowExW
RegisterWindowMessageW
CreateWindowExA
CreateWindowExW
CreateDialogParamA
CreateDialogParamW
RegisterClassA
RegisterClassW
MessageBoxA
MessageBoxW
SendMessageW
DrawTextA
DrawTextW
FindWindowExA
ShowWindow
EndDialog
DialogBoxParamA
DestroyWindow
DefWindowProcA
BeginPaint
RegisterClassExA
LoadCursorA
LoadIconA
PostQuitMessage
EndPaint
DrawFocusRect

gdi32

SetTextColor
GetTextExtentPointW
GetTextExtentPointA
CreateFontIndirectW
CreateFontIndirectA
SetBkColor
SelectObject
RestoreDC
DeleteObject
GetObjectA
SaveDC

advapi32

RegSetValueExW
GetUserNameA
RegCreateKeyExW
RegCreateKeyExA
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegEnumKeyW
RegEnumKeyA
RegOpenKeyExW
RegOpenKeyExA
OpenProcessToken
OpenThreadToken
RegCloseKey
GetUserNameW

ole32

CoRegisterClassObject
StringFromGUID2
CLSIDFromString
CoInitializeEx
CoInitialize
CoFreeUnusedLibraries
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoRevokeClassObject

ntdll

toupper
strncpy
wcscmp

msvcrt

exit

comctl32

ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_Draw
InitCommonControlsEx
ImageList_Create

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 436KB - Virtual size: 755KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bfad845f3ce3325867e000a143c2b425

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

ntdll

msvcrt

comctl32

Sections

.text Size: 16KB - Virtual size: 15KB

.data Size: 436KB - Virtual size: 755KB

.rsrc Size: 76KB - Virtual size: 72KB

.text
Size: 16KB - Virtual size: 15KB

.data
Size: 436KB - Virtual size: 755KB

.rsrc
Size: 76KB - Virtual size: 72KB