VirusShare_146722c6b41967944c11e6b527b3c290 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_146722c6b41967944c11e6b527b3c290
Size

216KB
MD5

146722c6b41967944c11e6b527b3c290
SHA1

c8638ba53e4a693aea55ce8db9eebb36a7bb5bd1
SHA256

5dbdf0db6278e782552f2eb9daeababb8d69a9a52e6849b600a37d10e6f76ff5
SHA512

d7155dd93c076ff87a403499302bf98e854e8660daa7dc070b8774d91ed36b4d2b4c142925cd5541306d5c450e20a52876bd256860b3c267e0c28145e8bf090e
SSDEEP

3072:fouj4M2EELugRMpesJpHK4RTkedXPM/2AunR5Gwyhel:QuEDtLPSpesrK4b/rLGw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_146722c6b41967944c11e6b527b3c290

Files

VirusShare_146722c6b41967944c11e6b527b3c290
.dll windows:4 windows x86 arch:x86

9302074b4de435ec7a85727c853b711c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalReAlloc
IsValidLanguageGroup
FindNextChangeNotification
GetLocaleInfoA
GetLastError
GetTapeStatus
InterlockedCompareExchange

Exports

Exports

DefaultCodec
DefaultCursorIndex
DefaultOfficeClass

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ydata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ