VirusShare_e18c024b49642ead0f04eaf2430cb897

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_e18c024b49642ead0f04eaf2430cb897
Size

216KB
MD5

e18c024b49642ead0f04eaf2430cb897
SHA1

16b438b1c08887f7b3f2173efb8425a2827f9f3c
SHA256

cb5b28e145f6f8e03860ef1c548c2cc8fd8ce6cd8ee85f0964caaeff46157131
SHA512

73aaf6a33c581549d3fdb40f14ff4f8c8d3d721ecc57cd28c971f67f4ddf1ad08116d98246e2ffb8192400ce79916a2d3a3c2026dfa3803e7b677b68b76965ef
SSDEEP

3072:o5hHQpe7/QXLTXrgnF/4AS+U1bFKK+GhAiRTMguD3wONcyBl5Vs8s:KhHQBalw15KPGkNcyBl5VBs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_e18c024b49642ead0f04eaf2430cb897

Files

VirusShare_e18c024b49642ead0f04eaf2430cb897
.exe windows:5 windows x86 arch:x86

456bcc36ff57f6196f5567c220c04139

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostMessageW
GetSystemMetrics
GetDesktopWindow
MapWindowPoints
OpenClipboard
DrawCaption
GetKeyboardLayoutNameW
GetScrollRange
GetWindowLongA
TrackMouseEvent
GetTopWindow
ToAscii
DrawIconEx
GetActiveWindow
GetClipboardSequenceNumber
GetTitleBarInfo
GetMessagePos
OpenInputDesktop
ScrollWindow
IsCharUpperW
CreateAcceleratorTableW
ValidateRgn
GetClassWord
MessageBoxA
EmptyClipboard

shell32

CommandLineToArgvW

gdi32

GetRandomRgn
TextOutW
Arc
SelectClipRgn
RemoveFontResourceExA
SetArcDirection
GetWindowOrgEx
GetOutlineTextMetricsA
SetColorAdjustment
ExtFloodFill
Chord
GetPaletteEntries
GetBitmapDimensionEx
GetCharWidthA
TranslateCharsetInfo
SetDCBrushColor
SetBitmapDimensionEx
GetNearestColor
GetEnhMetaFileDescriptionW
GetCharWidth32W
GetObjectA
DeleteMetaFile
DeleteColorSpace
EnumICMProfilesA
DrawEscape
DeleteDC
DPtoLP
GetCharABCWidthsFloatA
GetNearestPaletteIndex
GetArcDirection
GetRgnBox
GetWorldTransform
SetSystemPaletteUse
GetBkColor
OffsetClipRgn
GetViewportOrgEx

kernel32

GetConsoleMode
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
RaiseException
HeapSize
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
HeapAlloc
GetCommMask
GlobalUnlock
GetModuleFileNameW
GetLogicalDrives
GetCommandLineA
AreFileApisANSI
CreateTimerQueue
ConvertFiberToThread
GetProcessTimes
IsProcessInJob
GetThreadSelectorEntry
QueueUserAPC
SetFileApisToOEM
CopyFileA
SetEndOfFile
GetSystemDirectoryA
OpenProcess
ReleaseMutex
RemoveDirectoryA
IsBadReadPtr
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
DeleteCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetConsoleCP

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

456bcc36ff57f6196f5567c220c04139

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

gdi32

kernel32

Sections

.text Size: 91KB - Virtual size: 90KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 25KB - Virtual size: 48KB

.rsrc Size: 88KB - Virtual size: 87KB

.text
Size: 91KB - Virtual size: 90KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 25KB - Virtual size: 48KB

.rsrc
Size: 88KB - Virtual size: 87KB