VirusShare_b62587dc8304bbc9ce68d0e8098dcabb

Sharing

Copy URL Twitter E-mail

General

Target
VirusShare_b62587dc8304bbc9ce68d0e8098dcabb
Size 260KB
Sample240607-wyds9sch28
SHA256 03fa142c0153a5651371ebefc567bf9988338050f9c185e3b0dafdc0f5092744
MD5 b62587dc8304bbc9ce68d0e8098dcabb
SHA1 969c18c86fa5e97341ae09ea268f87c06a42d7f0
SHA512 67fc72e78ad5ec2e0bf8eec50e478421d8a36834dffb963b943bb1d4ed31e991dca5a70b3edb783899e4595f17895089aff69b30918f5749e2c11752645b98cf
SSDEEP 6144:PmcU60DxID/MygKh2eJyDnqWkRN8uRsyS0:elxxeMyB0NnhkQuRsI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_b62587dc8304bbc9ce68d0e8098dcabb

File Explorer

VirusShare_b62587dc8304bbc9ce68d0e8098dcabb

.exe 260KB

VirusShare_b62587dc8304bbc9ce68d0e8098dcabb

IMPHASH 3973e5b7b7bae7947101b3ac6b3020b1
SHA256 03fa142c0153a5651371ebefc567bf9988338050f9c185e3b0dafdc0f5092744
MD5 b62587dc8304bbc9ce68d0e8098dcabb
SHA1 969c18c86fa5e97341ae09ea268f87c06a42d7f0
SHA512 67fc72e78ad5ec2e0bf8eec50e478421d8a36834dffb963b943bb1d4ed31e991dca5a70b3edb783899e4595f17895089aff69b30918f5749e2c11752645b98cf
SSDEEP 6144:PmcU60DxID/MygKh2eJyDnqWkRN8uRsyS0:elxxeMyB0NnhkQuRsI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

48514

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

lz32

CopyLZFile

kernel32

GetStartupInfoA GlobalFlags FlushFileBuffers FreeConsole HeapLock GetDefaultCommConfigW GetModuleHandleA

shlwapi

PathCompactPathExW PathRemoveBlanksW SHDeleteKeyA PathIsUNCServerShareA PathQuoteSpacesW SHDeleteValueW SHRegDeleteEmptyUSKeyA PathIsUNCW StrFormatByteSizeA PathIsSystemFolderW PathCommonPrefixW StrCmpIW PathIsRootW PathFindNextComponentA SHDeleteKeyW PathSearchAndQualifyW StrPBrkA PathMatchSpecW SHRegWriteUSValueW PathRemoveBlanksA PathCommonPrefixA PathAddBackslashW StrSpnA StrCpyW StrCatW PathParseIconLocationW PathIsURLW SHRegSetUSValueW PathAddExtensionW StrCSpnIW PathCombineA SHRegOpenUSKeyW ChrCmpIW PathIsRelativeA SHDeleteValueA PathSetDlgItemPathA PathStripToRootW PathUnmakeSystemFolderA PathBuildRootA SHDeleteEmptyKeyA PathAppendW SHEnumKeyExA PathFindOnPathA PathGetDriveNumberA PathMakePrettyA PathFindExtensionW SHRegEnumUSKeyW PathMatchSpecA SHCreateShellPalette PathIsUNCServerShareW PathFindOnPathW SHGetValueA SHRegGetUSValueW SHRegGetUSValueA SHRegEnumUSKeyA ChrCmpIA PathRemoveFileSpecW SHRegCreateUSKeyA SHRegCreateUSKeyW SHRegDeleteEmptyUSKeyW PathCompactPathW PathCanonicalizeA PathFileExistsA PathUnquoteSpacesA PathMakeSystemFolderW PathIsFileSpecA PathRenameExtensionW StrDupA StrTrimW PathRelativePathToA SHRegEnumUSValueW SHRegDeleteUSValueA PathStripPathA PathMakePrettyW PathIsPrefixA StrCSpnA PathIsRootA PathStripPathW PathAppendA PathBuildRootW StrSpnW PathIsDirectoryW PathIsUNCA SHQueryValueExW PathRemoveBackslashA SHQueryInfoKeyW PathCanonicalizeW StrNCatW PathIsRelativeW PathRemoveArgsA StrFormatByteSizeW PathFindNextComponentW PathFindFileNameA StrCmpW SHEnumKeyExW StrIsIntlEqualW PathGetDriveNumberW SHRegGetBoolUSValueA StrCSpnIA PathIsUNCServerA PathGetArgsA PathIsUNCServerW PathIsFileSpecW PathIsDirectoryA PathAddBackslashA PathUnquoteSpacesW SHRegOpenUSKeyA PathRemoveBackslashW PathRenameExtensionA PathIsSameRootW SHQueryValueExA PathIsContentTypeW StrFromTimeIntervalW SHSetValueW SHRegWriteUSValueA

version

VerQueryValueW GetFileVersionInfoSizeW

msvcrt

__p__commode _controlfp _except_handler3 __set_app_type __p__fmode _exit _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter

oleacc

WindowFromAccessibleObject

pdh

PdhEnumMachinesA

mpr

WNetGetProviderNameW WNetCancelConnectionA WNetGetUniversalNameA WNetAddConnection3W WNetAddConnection2W MultinetGetConnectionPerformanceW WNetConnectionDialog WNetAddConnectionW

Sharing

General

Malware Config

Signatures

File Explorer

VirusShare_b62587dc8304bbc9ce68d0e8098dcabb

lz32

kernel32

shlwapi

version

msvcrt

oleacc

pdh

mpr

generic