VirusShare_ebad029e8e100b60abe951518481f1a0

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_ebad029e8e100b60abe951518481f1a0
Size

417KB
MD5

ebad029e8e100b60abe951518481f1a0
SHA1

f50816f3f06285d33cc6d6ffe71204880c43dec6
SHA256

e4a74450e563a8c235b9b82a7c856d994b1da3bbddfad8755571545e343bce31
SHA512

9ddff0a7b33ce1735cb09f76a467c288c8a2df50af803d988d5c9bbaca8daad249302ff8285c42a77e809f141f8cc57f4a9a50e632c28423e12a9e933cd59ece
SSDEEP

6144:p2b3d+ilayqjvjbDqKKKTgCPSMOJ+auitzH8vRXmnoL1/H+JpG03+V0:p2b3dLEyqjvjHqwcrtzcduE5p0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_ebad029e8e100b60abe951518481f1a0

Files

VirusShare_ebad029e8e100b60abe951518481f1a0
.exe windows:4 windows x86 arch:x86

234c06c0124dc138a48c150319490022

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
ExitProcess
RtlUnwind
TerminateProcess
HeapFree
HeapAlloc
RaiseException
HeapSize
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
SetStdHandle
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
FormatMessageW
GetTickCount
FileTimeToLocalFileTime
FindResourceA
GlobalAddAtomA
GetProfileStringA
FileTimeToSystemTime
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesW
GetThreadLocale
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
CreateFileW
GetCurrentProcess
DuplicateHandle
SizeofResource
GetProcessVersion
GetLastError
WritePrivateProfileStringW
GlobalFlags
lstrcmpiW
lstrcpynW
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
MulDiv
LoadLibraryA
GetVersion
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
lstrcpyW
GetModuleHandleW
GetProcAddress
SetLastError
FreeLibrary
MultiByteToWideChar
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalUnlock
GlobalFree
LockResource
FindResourceW
LoadResource
CloseHandle
GetModuleFileNameW
GlobalLock
lstrcmpW
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
lstrlenW
WideCharToMultiByte
GetCurrentThread
GetCurrentThreadId
SetCurrentDirectoryA
GetModuleHandleA
WriteFile
GetSystemInfo
HeapDestroy
ReadFile
GetTimeFormatW
FlushFileBuffers
SetCommBreak
GetEnvironmentStringsW
HeapReAlloc
GetLocalTime
SetEvent
FreeEnvironmentStringsA
GetDateFormatA
VirtualAlloc
lstrcpynA

user32

InvalidateRect
InflateRect
RegisterClipboardFormatW
PostThreadMessageW
AdjustWindowRectEx
ScreenToClient
CopyRect
GetTopWindow
IsChild
GetCapture
wsprintfW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
CreateWindowExW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongW
RegisterWindowMessageW
OffsetRect
IntersectRect
SystemParametersInfoW
MessageBeep
GetWindowRect
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
KillTimer
WaitMessage
EndDialog
SetActiveWindow
CreateDialogIndirectParamW
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
GetFocus
GetNextDlgTabItem
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageW
GetCursorPos
SetWindowsHookExW
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongW
LoadIconW
SendMessageW
AppendMenuW
GetSystemMenu
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
MessageBoxW
SetCursor
PostMessageW
EnableWindow
InsertMenuA
FindWindowW
SetDlgItemTextW
SetCapture
SetTimer
FindWindowA
WinHelpA
WinHelpW
ShowCursor
PostQuitMessage
IsIconic
SendMessageA
EndPaint
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableW
CharNextW
GetWindowPlacement
CharUpperW
UpdateWindow
IsWindow
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
DrawFocusRect
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
DrawIcon
GetClientRect
GetSystemMetrics
PtInRect
GetClassNameW
GetDesktopWindow
LoadCursorW
GrayStringW
DrawTextW
TabbedTextOutW
BeginPaint
GetWindowDC
ReleaseDC
EnableMenuItem
GetSysColorBrush
GetDC
ClientToScreen
DestroyMenu
LoadStringW
SetFocus
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
DestroyWindow
GetSysColor

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
SetMapMode
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
CreateFontIndirectA
SelectPalette
CreateDIBitmap
ExtTextOutA
GetTextExtentPointA
BitBlt
CreateCompatibleDC
GetCharWidthA

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueExW
GetLengthSid
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegCreateKeyExA
RegEnumKeyA

comctl32

ord17

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
CoRevokeClassObject
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
SysStringLen

wsock32

connect
sendto
recvfrom
socket
inet_ntoa
WSAAsyncSelect
send
recv
WSACleanup
WSAStartup
WSASetLastError
WSAGetLastError
accept
ioctlsocket
bind
htons
htonl
closesocket

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dat
Size: 28KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

234c06c0124dc138a48c150319490022

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

Sections

.text Size: 140KB - Virtual size: 138KB

.rdata Size: 40KB - Virtual size: 37KB

.dat Size: 28KB - Virtual size: 45KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 140KB - Virtual size: 138KB

.rdata
Size: 40KB - Virtual size: 37KB

.dat
Size: 28KB - Virtual size: 45KB

.rsrc
Size: 8KB - Virtual size: 7KB