VirusShare_c7883fe39662d38de0725591d99c1877

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_c7883fe39662d38de0725591d99c1877
Size

316KB
MD5

c7883fe39662d38de0725591d99c1877
SHA1

5682761e53d7bfe9552f2df2e0df6c9e1bf6f46e
SHA256

6452631b93af47820004d77596c10847dd262f798211cc658b6160688b4d7ebc
SHA512

224929ca2d94b646d8f2e1c553a708d69c935b132f4f8cc7521747abe31a222f7e0c477f137aedc3a0de17e6c332628dfde19dcd3cd234de667e89160aa1416d
SSDEEP

6144:mOMqwVPEw3nMicBkbjUngwcd6y1EWXtU2sR2FSXr3aRl+UqaY+UcyX:mnqIPEw3MlBZEEWXttsRkS73cl+PaIc8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_c7883fe39662d38de0725591d99c1877

Files

VirusShare_c7883fe39662d38de0725591d99c1877
.exe windows:4 windows x86 arch:x86

f77ee5816be982cc4a4d10f6d5ddbc6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameA

kernel32

GetStringTypeA
CreateSemaphoreA
GetStartupInfoA
FileTimeToDosDateTime
GetCPInfoExA
GetModuleHandleA

user32

LoadAcceleratorsA
DdeEnableCallback
GetKeyboardType
GetPriorityClipboardFormat
BlockInput
ToAscii
RegisterClassExA
GetClassInfoA

mpr

WNetEnumResourceW
WNetAddConnection3A
WNetConnectionDialog
WNetCloseEnum
WNetAddConnection2W
MultinetGetConnectionPerformanceW
WNetOpenEnumW
WNetOpenEnumA
WNetEnumResourceA
WNetAddConnection3W
WNetAddConnectionA
WNetGetConnectionW
WNetGetConnectionA
MultinetGetConnectionPerformanceA
WNetAddConnectionW
WNetGetProviderNameA
WNetGetUserA
WNetGetLastErrorW
WNetDisconnectDialog
WNetGetLastErrorA
WNetGetNetworkInformationA
WNetGetUniversalNameA
WNetConnectionDialog1A
WNetGetUniversalNameW
WNetGetUserW
WNetCancelConnection2A
WNetAddConnection2A
WNetUseConnectionA

msvcrt

__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv

imm32

ImmSetConversionStatus
ImmConfigureIMEA
ImmGetProperty
ImmGetCompositionStringW
ImmSetStatusWindowPos
ImmRegisterWordW
ImmGetIMEFileNameA
ImmGetIMEFileNameW
ImmGetConversionListW
ImmGetDescriptionA
ImmGetCandidateWindow
ImmUnregisterWordA
ImmIsUIMessageW
ImmGetCompositionWindow
ImmSetCompositionFontW
ImmSetCompositionFontA
ImmEnumRegisterWordA
ImmSetCompositionWindow
ImmEnumRegisterWordW
ImmGetDescriptionW
ImmGetContext
ImmEscapeA
ImmEscapeW
ImmIsIME
ImmGetStatusWindowPos
ImmSetCompositionStringW
ImmConfigureIMEW
ImmGetGuideLineA
ImmRegisterWordA
ImmGetCompositionFontA
ImmSetOpenStatus
ImmReleaseContext
ImmAssociateContext
ImmGetConversionStatus
ImmGetRegisterWordStyleW

advapi32

ChangeServiceConfig2A
GetSecurityDescriptorSacl
LsaSetInformationPolicy
RegCloseKey
LsaNtStatusToWinError
LookupPrivilegeValueA
MakeSelfRelativeSD
LsaSetDomainInformationPolicy
CreateServiceA
RegDeleteKeyA
GetAclInformation
ReadEventLogW
GetPrivateObjectSecurity
LsaSetTrustedDomainInformation
LsaSetTrustedDomainInfoByName
NotifyChangeEventLog
RegCreateKeyExA
RegDeleteKeyW
GetSecurityDescriptorDacl
ControlService
RegRestoreKeyW
RegQueryMultipleValuesA
RegCreateKeyA
GetExplicitEntriesFromAclW
RegEnumValueA
RegisterEventSourceA
ImpersonateLoggedOnUser
BuildImpersonateExplicitAccessWithNameA
SetServiceObjectSecurity
RegQueryValueExA
LsaLookupNames
GetTrusteeNameW
GetServiceDisplayNameW
ImpersonateSelf
OpenProcessToken
GetTrusteeFormA
EncryptFileW
BuildImpersonateExplicitAccessWithNameW
AddAccessAllowedAce
RegDeleteValueA
QueryServiceStatus
IsTokenRestricted
LookupPrivilegeNameA
InitializeSecurityDescriptor
BuildSecurityDescriptorW
GetLengthSid

version

GetFileVersionInfoSizeW
VerInstallFileA
VerQueryValueA

winmm

waveInClose
mciSendCommandA
waveInGetPosition
waveOutGetVolume
midiStreamProperty
waveOutRestart
joyGetDevCapsW
mciGetErrorStringA
midiStreamRestart
timeSetEvent
waveInUnprepareHeader
mmioSendMessage
joyGetPos
waveOutGetID
mciSendStringW
mmioSetInfo
mciGetDeviceIDFromElementIDA
mmioInstallIOProcA
waveOutPause
midiInGetErrorTextA
waveOutGetDevCapsW
midiOutShortMsg
mixerGetControlDetailsW
mciGetDeviceIDA
mixerGetLineInfoW
waveInGetErrorTextW
midiStreamOpen
midiInStop
waveInGetErrorTextA
midiOutCachePatches
auxSetVolume
mciGetYieldProc
midiOutGetID
mixerGetLineInfoA
mciSetYieldProc
mixerSetControlDetails
mixerGetDevCapsW
midiInOpen
midiStreamClose
SendDriverMessage
midiOutCacheDrumPatches
waveInGetDevCapsA
auxGetDevCapsW
midiInGetDevCapsA
mmioAdvance
midiOutGetVolume
mmioOpenW
mmioSetBuffer
midiDisconnect
midiOutGetErrorTextW
waveOutUnprepareHeader
mixerGetID
mmioWrite
mmioCreateChunk
midiOutGetDevCapsW
mixerGetLineControlsA
waveOutClose
timeGetTime
midiInGetDevCapsW
midiOutOpen
waveInGetDevCapsW
mciGetCreatorTask
midiInUnprepareHeader
waveInAddBuffer
timeKillEvent
midiStreamPosition
waveOutGetPosition
midiStreamOut
joyGetPosEx
joySetThreshold
waveOutSetPitch
waveOutGetNumDevs
waveInGetID
joyGetNumDevs
waveInMessage
midiOutGetDevCapsA
midiOutLongMsg
mmioOpenA
midiOutSetVolume
midiInAddBuffer
mmioGetInfo
mmioRenameA
mixerOpen
mixerGetDevCapsA
midiInPrepareHeader
waveOutGetPitch
waveInGetNumDevs
waveInStart
midiInStart
mmioDescend
midiOutPrepareHeader
midiOutGetNumDevs
sndPlaySoundA
mciGetDeviceIDW
waveInPrepareHeader
waveOutSetPlaybackRate

gdi32

ExtCreateRegion
CreateSolidBrush
SetPixelV
ResetDCA
GetGraphicsMode
CreatePenIndirect
GetClipRgn
SetPaletteEntries
SetColorSpace
GetCurrentPositionEx
GetPixelFormat
CreateRectRgnIndirect
PolyDraw
EnumObjects
RealizePalette
GetFontLanguageInfo
UnrealizeObject
GetOutlineTextMetricsW
ArcTo
GetCharABCWidthsW
EnumICMProfilesW
Pie
GetCharWidthW
PlayEnhMetaFile
CreateEllipticRgn
SelectClipRgn
SetEnhMetaFileBits
GetMetaFileW
SetWorldTransform
CreateDIBPatternBrushPt
GetNearestPaletteIndex
GetTextMetricsW
Arc
EnumMetaFile
GetBkMode
CreatePen
GetTextExtentPoint32A
CreateHalftonePalette
SetDIBColorTable
GetBitmapDimensionEx
CreateFontIndirectA
GetTextCharacterExtra
BeginPath
EndPath
RemoveFontResourceA
CreateFontIndirectW
CheckColorsInGamut
GetCharWidth32W
PlayMetaFile
GetColorAdjustment
CreateFontA
Polygon
TextOutW
IntersectClipRect
FlattenPath
DeleteMetaFile
GetMiterLimit
GetCharWidth32A
GetStockObject
EnumFontFamiliesA
Rectangle
GetRegionData
GetFontData
TextOutA
PlayEnhMetaFileRecord
AbortDoc
CreateCompatibleBitmap
GetICMProfileA
GetBrushOrgEx
GetEnhMetaFileBits
GetROP2
SetTextColor
CreateColorSpaceW
GetEnhMetaFilePaletteEntries
MaskBlt
SetDeviceGammaRamp
CreateDCA
PolyPolyline
GetEnhMetaFileA
DeleteColorSpace
FillRgn
GetTextFaceA
ExtEscape
SetBrushOrgEx
SetBitmapDimensionEx
CreateDCW
GetEnhMetaFileHeader
PolyPolygon
GetEnhMetaFileDescriptionW
TranslateCharsetInfo
ScaleViewportExtEx
PathToRegion
FrameRgn
Ellipse
GetCharABCWidthsFloatW
SetMapMode
GdiGetBatchLimit
GetMetaFileA
AddFontResourceW
GdiComment
Polyline
DeleteDC
CloseEnhMetaFile
SelectClipPath
GetGlyphOutlineA
SetPixel
GetTextColor
CloseMetaFile
GetTextExtentPointW
SetStretchBltMode
AbortPath
SetTextCharacterExtra
PolyBezierTo
SwapBuffers
GetDeviceCaps
UpdateColors
RemoveFontResourceW
SetICMProfileA
SetPixelFormat
CancelDC
GetPath
CreateBitmapIndirect
EnumEnhMetaFile
PolyTextOutA
CreateMetaFileA
EndDoc
GetTextExtentPoint32W
StartDocW
GdiFlush
ExtCreatePen
PtVisible
GetCharWidthFloatA
CopyEnhMetaFileW
SetMapperFlags
GetPaletteEntries
PtInRegion
GetViewportExtEx
AngleArc
EnumFontFamiliesExW
SetTextAlign
CreateICA
GetGlyphOutlineW
GetColorSpace
SetBoundsRect
OffsetWindowOrgEx
UpdateICMRegKeyA
StretchBlt
GetMetaFileBitsEx
CombineTransform
PlgBlt
PatBlt
CopyEnhMetaFileA
CombineRgn
GetTextExtentPointA
SelectPalette
GdiSetBatchLimit
CreateBitmap
CreateMetaFileW
GetCharacterPlacementW
GetLogColorSpaceW
EnumFontFamiliesW
SetDIBitsToDevice
UpdateICMRegKeyW
CreateEnhMetaFileW
ResetDCW
GetTextCharset
StrokePath
ExtTextOutW
PaintRgn
GetObjectA
GetObjectW
GetClipBox
CreateDIBPatternBrush
FixBrushOrgEx
SetAbortProc
CreateDIBitmap
CopyMetaFileA
DescribePixelFormat
ExcludeClipRect
GetArcDirection
OffsetClipRgn
SetBkMode
GetDIBColorTable
SaveDC
PolyBezier
GetWindowOrgEx
CreateColorSpaceA
InvertRgn
GetMetaRgn
SetGraphicsMode
GetSystemPaletteEntries
CreateFontW
GetTextFaceW
GetICMProfileW
GetViewportOrgEx
SetColorAdjustment
SelectObject
SetViewportExtEx
ResizePalette
PolylineTo
EnumFontFamiliesExA
CreateICW
GetCurrentObject
GetKerningPairsA
GetPolyFillMode
RoundRect
GetObjectType
GetMapMode
GetDCOrgEx
SetSystemPaletteUse
GetWinMetaFileBits
GetEnhMetaFileDescriptionA
EnumFontsA
FloodFill
MoveToEx
StartDocA
LineDDA
StrokeAndFillPath
ExtTextOutA
GetCharWidthA
GetStretchBltMode
SetDIBits
GetDeviceGammaRamp
GetNearestColor
DeleteObject
CreateDIBSection
CreatePolygonRgn
LineTo
GetTextCharsetInfo
CreateRectRgn
GetAspectRatioFilterEx
CreatePatternBrush
SetRectRgn
SetWindowOrgEx
RectVisible
SetArcDirection
GetDIBits
PolyTextOutW
SetWindowExtEx
GetCharABCWidthsA
SetBkColor
CreateRoundRectRgn
DPtoLP
GetOutlineTextMetricsA
CreateEllipticRgnIndirect
SetROP2
SetWinMetaFileBits
StartPage

winspool.drv

AddMonitorA
EnumPrinterDriversA

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f77ee5816be982cc4a4d10f6d5ddbc6f

Headers

File Characteristics

Imports

comdlg32

kernel32

user32

mpr

msvcrt

imm32

advapi32

version

winmm

gdi32

winspool.drv

Sections

.text Size: 88KB - Virtual size: 85KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 4.1MB

.rsrc Size: 24KB - Virtual size: 20KB

.text
Size: 88KB - Virtual size: 85KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 4.1MB

.rsrc
Size: 24KB - Virtual size: 20KB