VirusShare_f24a807d36482d76272ba9422a4def70 | Triage

Sharing

General

Target

VirusShare_f24a807d36482d76272ba9422a4def70
Size

140KB
MD5

f24a807d36482d76272ba9422a4def70
SHA1

f68b980514a5cfea35963ad94b9fc221b9e0faf0
SHA256

2e264bd682fca0ea14723e9833c59f54483f46cf7e19b1330681ea180dda3518
SHA512

c7b67712ff10e3564afb06b2884988570584812e3e5c756edea1d1726e541a6a84ac1e9635cde3b3cefc7f8282d50c4fd2164217341c4f04512347494db53a8e
SSDEEP

1536:7Cmc5/kaYG7J68liPnFzaNn3BvzOtwuToNVZHY91EJsTDmQlyPTXJbiTQVGCwE9p:73c5/WPFze1Stw/VymQcPTMTRJo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_f24a807d36482d76272ba9422a4def70

Files

VirusShare_f24a807d36482d76272ba9422a4def70
.dll windows:4 windows x86 arch:x86

daa9716875d6da9aafef592b20cb0c6c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\asdf\sdg93.pdb

Imports

user32

ReleaseDC

kernel32

GetModuleFileNameW
GetFileSize
InterlockedCompareExchange
GetFileAttributesW
GetModuleHandleA
CreateEventW
GetFileType
GetThreadLocale
VirtualQuery
GetFileAttributesA
EnterCriticalSection

msvcrt

isalnum
srand
isgraph

Exports

Exports

export1

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ