VirusShare_1d0fdcd56040de6341438ac83e5ff823

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_1d0fdcd56040de6341438ac83e5ff823
Size

37KB
MD5

1d0fdcd56040de6341438ac83e5ff823
SHA1

e14355ef45d09fc59c1b129cf6939563994841be
SHA256

ba08286b6c137f7425372a7f1c0bf3a6c5153c903ca60d28aa210c34c9853155
SHA512

d294e639b9a8d9587768832b56cc8c0b25659a25794c564ef1c14dc34e1a7c5a4cafe0da16c1f12a96d74c08eed0b8f3be027a9c4a41702a8770d4d3b4484d38
SSDEEP

768:cN43loSAPoWUKHyAq/DTsfu+R0296hCb:cy3sPUKHyxH+R0296hCb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_1d0fdcd56040de6341438ac83e5ff823

Files

VirusShare_1d0fdcd56040de6341438ac83e5ff823
.exe windows:4 windows x86 arch:x86

1f96fde849e0237462320f106ac2d734

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
GetVolumePathNameA
FindNextVolumeMountPointA
GlobalUnWire
FindVolumeClose
RemoveDirectoryA
SetConsoleTitleA
CloseHandle
SetThreadExecutionState
GetStringTypeExA
SetConsoleCursor
WaitForDebugEvent
HeapLock
CreateFileMappingA
GetProcessWorkingSetSize
SetThreadUILanguage
TlsFree
SetFileAttributesA
GetSystemTimes
GetConsoleCommandHistoryA
_hread
LocalFlags
GetCommModemStatus
TerminateJobObject
GetWindowsDirectoryA
EndUpdateResourceA
SetConsoleFont
GetThreadPriority
CreateFileA
VerifyVersionInfoA
VirtualAllocEx
OpenEventA
GetConsoleMode
LZCopy
GetExitCodeThread
GetModuleHandleA
GetNamedPipeHandleStateA
WriteProfileStringA
GetConsoleFontSize
GetCommTimeouts
TlsAlloc
GetCommState

user32

LoadCursorFromFileA
GetWindow
RegisterLogonProcess
GetClassInfoA
SetLastErrorEx
SetWindowPlacement
DestroyIcon
SetClassWord
SetWindowRgn
GetDoubleClickTime
UnhookWinEvent
IsChild
CharToOemBuffA
RegisterSystemThread
SetCaretBlinkTime
GetCaretPos
GetAsyncKeyState
DrawFrame
UpdatePerUserSystemParameters
GetProcessWindowStation
ToAsciiEx
CreateIcon
CheckMenuRadioItem
GetTitleBarInfo
CharLowerBuffA
IsCharUpperA
SetDlgItemTextA
CreateMDIWindowA
DrawIcon
CharNextA
EnumPropsExW
CreateDialogIndirectParamA
DrawEdge
DragObject
CharLowerBuffA
SetWindowsHookExA
SetWindowsHookExA
LoadImageA
FindWindowExA
SetDoubleClickTime

rasapi32

RasGetConnectStatusW
RasGetConnectStatusA

dsound

DirectSoundCreate

Exports

Exports

OpenLylpvsggguu
Mnwukhoetyn
BeginEkemlcc
Mtqwmaa
OpenWxarjnhsoaf
Xallayg
Mvwidtetcp
Bfarhmeruym
Tykvjkbo
Nhkxqnm
Oyaripy
IsUkrigwdhg
CreateBgdtvahi
Oypdvfryn
IsKbdwigqbfa
CreateElqqongev
Ahggagcb
Hxubxpf
Vmakpbsupw
Yuljxdepvpa
Qkmkfov
Dppxrshpy
Sctxwgd
Iafcpccyf
Xvccuxslf
Nulatwytgi
EndSmgpvgdcnf
Urkjvhnemwd
InitWiaahmmcicc
Idynobnl
GetBxbvtnoj
Mniortkrcbh

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f96fde849e0237462320f106ac2d734

Headers

File Characteristics

Imports

kernel32

user32

rasapi32

dsound

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 1024B - Virtual size: 2.3MB

.data Size: 22KB - Virtual size: 21KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 1024B - Virtual size: 2.3MB

.data
Size: 22KB - Virtual size: 21KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 3KB - Virtual size: 2KB