VirusShare_524c7f9da34f20c3294ba8d3b265fec0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_524c7f9da34f20c3294ba8d3b265fec0
Size

152KB
MD5

524c7f9da34f20c3294ba8d3b265fec0
SHA1

78aec9533ab8944da9d5cfd4fae01b4b83b2bbb1
SHA256

680166493a90d0d4dd5f4ecd77bae1be2e9433a27cf141fb5389ae6c271b5aed
SHA512

d5c418e42e3f2dc00f84b63fd728a5d158f22e66984f8159fccc13aa6a24ff8a72e91947d8f82d550ea07fd1905c02e1455301c6f999deef6a179fb53ac6ee7f
SSDEEP

1536:veDCmSK8xyAVH/AP+FUNTaHerWDzzZouE+YYhVJLmKDe:veDCjZUNWDzzZoxzYhVJk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_524c7f9da34f20c3294ba8d3b265fec0

Files

VirusShare_524c7f9da34f20c3294ba8d3b265fec0
.dll windows:4 windows x86 arch:x86

2a8a8d950313c9075b6187ff3107c707

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeConsole
EnterCriticalSection
lstrcpyA
DeleteTimerQueue
DnsHostnameToComputerNameW
GetNamedPipeHandleStateW
HeapUnlock
CompareFileTime
TlsAlloc
FreeConsole
TlsFree

user32

EnableScrollBar
ReleaseDC

Exports

Exports

MountainSnapshot

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ