VirusShare_66c26110b2162918e3a126ddc2f65c76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_66c26110b2162918e3a126ddc2f65c76
Size

252KB
MD5

66c26110b2162918e3a126ddc2f65c76
SHA1

8388fd8dfa456d65b847688a42518554e3fc22c8
SHA256

af755feed9ce455832559e1e6c39acb84f28738d605348d019adf434520cc259
SHA512

29c8829ff5358a75b548f3c35a6fd598a8bbf9ba6ce533c64bfe4b1f09169090d03d64f3baed6902a9bf16569de981a955b7cad446de4d090f8d6f006be746f9
SSDEEP

3072:suQZfWYSQSO46Btva7+gHWRYqsALbfuGz1jZlwTiBi6etz71xNZ:tub46rvw+uWRDbfl1jZqiBi6o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_66c26110b2162918e3a126ddc2f65c76

Files

VirusShare_66c26110b2162918e3a126ddc2f65c76
.dll windows:5 windows x86 arch:x86

a235a0b70bcd806d386c493b354cfd48

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
ReadFile
GetCommandLineW

gdi32

GetStockObject

advapi32

RegOpenKeyA

msvcrt

__dllonexit
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
_adjust_fdiv
_controlfp
_initterm
_onexit
_wcmdln
_wfopen
exit
wcstok

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 602B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ