VirusShare_445d8b449dc6389c9a97e9e9e8a10000 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_445d8b449dc6389c9a97e9e9e8a10000
Size

36KB
MD5

445d8b449dc6389c9a97e9e9e8a10000
SHA1

583e709f1d0b37b6c511b912f32030a8d8c8bcf9
SHA256

e53d1e5b25eb6bd56f489b8cff199e4c3b24493990e243ce5e57e2ae6fa8f535
SHA512

f3c2af3dbbeb72e47ae4b84243a4081bad4aa5f46c1d3215efac5cb67fb2119382938ef071eec23fefc736c600ccb5efa47bb9747e428a0a90ee049968b78148
SSDEEP

384:80Uv40+y+g9UKq1OuM6HKpn9gb0965g9vX6+Ww9QI+XriJT7RGgzqtQ8FbyGyDl7:SPKKqlnHG9CiJTNGgzybtG6C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_445d8b449dc6389c9a97e9e9e8a10000

Files

VirusShare_445d8b449dc6389c9a97e9e9e8a10000
.exe windows:4 windows x86 arch:x86

df0e79d97f00107506f8943f65032731

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SendMessageA
DestroyWindow
DialogBoxParamA
DefWindowProcA
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

GetStartupInfoA
GetModuleHandleA
GetCurrentDirectoryA
GetLastError
LoadLibraryA

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
__p__acmdln
exit
_XcptFilter
_exit
fgetc
fflush
fputc
_controlfp
_initterm
memset
wcsncmp
wcslen
memcpy

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ