VirusShare_fbbd7faff5a602f519105e26fb7acfa0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_fbbd7faff5a602f519105e26fb7acfa0
Size

68KB
MD5

fbbd7faff5a602f519105e26fb7acfa0
SHA1

4274941afc2a48c280390b42b9c091d690d85311
SHA256

1f6175b1e29455d325cbfe9e182774bde5f357929ace4c52c79e0ea0a35fe79f
SHA512

4c9a8c5bc2c4e7344ad243f39223c409f32e2c8ddf9601c79e69a354a2e4b660a16a353ab0482ee493e7a3ee6a9a1186a018df17878801d3f7eb4444dd1604b7
SSDEEP

768:SAygo5ebZ7ok3FZ9ypL0vzJDsOq2YAp7CP:Y19k7QwrJgOqHt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_fbbd7faff5a602f519105e26fb7acfa0

Files

VirusShare_fbbd7faff5a602f519105e26fb7acfa0
.exe windows:4 windows x86 arch:x86

d2841f45bf71d1c069b9a0f11b63eb04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemInfo
CreateMutexA
WriteProcessMemory
GetCurrentProcess
GetTimeFormatA
CreateSemaphoreW
LoadLibraryA
SleepEx
CreateDirectoryA
GetTickCount
WriteFile
FoldStringW
GetNumberFormatA
CompareStringA
HeapCreate

ctl3d32

Ctl3dEnabled
Ctl3dCtlColor
Ctl3dGetVer
Ctl3dUnregister
Ctl3dRegister

user32

CreateWindowExW
IsZoomed
SetCursorPos
DialogBoxParamW
GetMessageA
PostMessageA
GetCaretPos
PeekMessageA
ShowWindow
GetWindowTextA
GetWindowLongA
IsWindow
ShowWindow
CharToOemA

themeui

DllCanUnloadNow
DllGetClassObject
DllGetClassObject

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ