VirusShare_948e5c40d85070d10a491551abb107c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_948e5c40d85070d10a491551abb107c2
Size

249KB
MD5

948e5c40d85070d10a491551abb107c2
SHA1

9c09edcc196d4483c81c46e306e387c0a751d863
SHA256

cf7a4fdb9a5c094f409c3e6f57c974e3924af82de848048868de3756349895df
SHA512

408f270191f6a3826fcccd31fcf4f5c9fa06d2b993834e5cf3d27f60fe2cb74f0126541a485247512c013422a59dee53eb06eafa2edee6ad43db52c072a0a0cb
SSDEEP

3072:OypmMoKGWunhATmKH3rim09M4dUe8LrqI9FU2b:qNn+/7iPM4d9ohv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_948e5c40d85070d10a491551abb107c2

Files

VirusShare_948e5c40d85070d10a491551abb107c2
.dll windows:4 windows x86 arch:x86

02d76c393feb8d385167a85a006ffd29

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EnableWindow
GetParent
ReleaseDC
DrawTextW
DrawFrameControl
FillRect
IsRectEmpty
GetClientRect
DestroyWindow
SetWindowPos
ShowWindow
IsWindowVisible
IsIconic
ToAscii

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoTaskMemAlloc

Exports

Exports

wqQOXieeC

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

adata
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ