VirusShare_7b5a83b73896b05cbb5a13613ccb4f93 | Triage

Sharing

General

Target

VirusShare_7b5a83b73896b05cbb5a13613ccb4f93
Size

301KB
MD5

7b5a83b73896b05cbb5a13613ccb4f93
SHA1

c567dc0c799b848c13ffa15eb6c17cf2f72a44ce
SHA256

724b5ab0f89f58254b60c563494b3a5eb888123db83e03f7d9550a43174c5aa5
SHA512

c2546cc5420029a78a27c2e8d3f92b62effedfcf232c82b86115bd71b623bac8154732ea0eb7550bc2a46a43cc5c4194cc2067deefbad2d98f3019df602e9698
SSDEEP

6144:dXaucJaxOE5IKecfI6xeg+u00bfxMHRMFYf2tUrv6dChPgSEt:Y8D5IKeuIBg+uP5Mxh2t06wi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_7b5a83b73896b05cbb5a13613ccb4f93

Files

VirusShare_7b5a83b73896b05cbb5a13613ccb4f93
.exe windows:4 windows x86 arch:x86

13bc6a12645c9ea2621ba7e8fe12c7c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
GetModuleHandleA
HeapCreate
GetLocalTime
GetTickCount
IsValidCodePage
SetLastError
SetPriorityClass
SetFilePointer
HeapFree
TlsAlloc
lstrcatW
SetStdHandle
GetPrivateProfileStringA
CreateWaitableTimerA
ReadFile
GetDriveTypeA
GetLogicalDrives
GetLastError
GetConsoleTitleW
GetStdHandle
EndUpdateResourceA
lstrcmpiA

netshell

DllGetClassObject
DllRegisterServer
HrLaunchConnection
HrGetIconFromMediaType

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dataz
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 521B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ