VirusShare_5ef49a45d846d4fb6221e9f18603d2c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_5ef49a45d846d4fb6221e9f18603d2c0
Size

224KB
MD5

5ef49a45d846d4fb6221e9f18603d2c0
SHA1

3c9f741840a1ccca8b8d3af43f133966ac71bef6
SHA256

a2cd389cf4269ddfff21bcf52b049d4e3cc3abda94a00c1d26657cfa98867575
SHA512

146533c17ffbd18739edd2f935586d308d19e565a473ac00a62595d000d0fafef1fd63aac93e5139d767927cc771af7b88ba06dc75a053aa4d9c1f0d85438db8
SSDEEP

3072:HzmvgjFy0PBfuyJ/xwoS26/2MZoUMG6Ex6bKS00BP:H7o0PPtLSz/nounx0KS00BP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_5ef49a45d846d4fb6221e9f18603d2c0

Files

VirusShare_5ef49a45d846d4fb6221e9f18603d2c0
.dll windows:4 windows x86 arch:x86

094888b85427ecd227b0942a7e04a647

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadResource
FindResourceW
GetLocalTime
GetModuleFileNameW
Sleep
OutputDebugStringA
QueryPerformanceCounter
UnhandledExceptionFilter
WriteFile
SetFilePointer
FlushFileBuffers
lstrlenA
OutputDebugStringW
VirtualAlloc

user32

IsWindowEnabled
ShowWindow
SetWindowTextA

msvcrt

strncmp
wcschr
fclose
ftell
malloc
free
memset
calloc
isdigit
isleadbyte
isxdigit
localeconv
wctomb
iswctype
wcstombs
realloc
ungetc

Exports

Exports

AreA
BeStandardsTheThatThe
ListOfCommunity

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ