VirusShare_0bd4f9b53991e86e39945559be074f40

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_0bd4f9b53991e86e39945559be074f40
Size

159KB
MD5

0bd4f9b53991e86e39945559be074f40
SHA1

8c1a708c9b3a4e2a0099a70c2c03f27f52c79c08
SHA256

bd8ea8afa30983d877eab738552b7cc3ba1fdda43ba1aa59eae1744fc1d3a0b4
SHA512

7c0619b02a8ead97f9736535d0bbaae38a16ffbf8e64f88f548bcda3a4e360ea765c00e9221c4e199cd390b1c9d534fe5c4d79a8d4ca98b56797feed8a4dd7b0
SSDEEP

3072:64hbMKpT4gO8qw3/6Q7MaKUl7/ixokG7xFoBfLXNaE3:vNO8qWZjkYxa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_0bd4f9b53991e86e39945559be074f40

Files

VirusShare_0bd4f9b53991e86e39945559be074f40
.exe windows:5 windows x86 arch:x86

e4b332df0b9648b95a11a31ddf7cfac8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
VirtualFree
GetPrivateProfileIntW
DeviceIoControl
GetCommandLineW
IsValidLocale
FindFirstFileW
HeapCreate
WriteFile
InitializeCriticalSectionAndSpinCount
GetFileAttributesW
GetPrivateProfileSectionW
UnhandledExceptionFilter
GetDiskFreeSpaceExW
SetEvent
GetLastError
GetTimeFormatA
GetModuleFileNameA
ExitProcess
HeapReAlloc
WriteConsoleW
WaitForSingleObject
GetDateFormatA
VirtualQueryEx
InterlockedCompareExchange
CreateMutexW
VirtualAlloc
GetTickCount
GlobalMemoryStatus
CreateProcessW
LoadLibraryA
LeaveCriticalSection
GetProcAddress
GetUserDefaultLCID
GetFileSizeEx
GetStartupInfoW
HeapDestroy
IsValidCodePage
TerminateProcess
GetConsoleOutputCP
CloseHandle
GetTimeZoneInformation
ProcessIdToSessionId
CreateEventW
lstrlenA
RaiseException
TlsAlloc
InterlockedIncrement
FatalAppExitA
TlsGetValue
LockResource
TlsSetValue
GetStringTypeA
RtlUnwind
InterlockedDecrement
MultiByteToWideChar
WriteConsoleA
FindNextFileW
GetLocaleInfoW
LCMapStringW
ExitThread
SystemTimeToFileTime
CreateFileW
LoadLibraryW
MoveFileExW
FindResourceExW
CreateDirectoryW
GetCurrentThreadId
Module32FirstW
FreeLibrary
InitializeCriticalSection
GetLocaleInfoA
QueryPerformanceCounter
lstrcmpiW
EnumSystemLocalesA
SetHandleCount
OpenFileMappingW
GetCurrentThread
Sleep
DeleteFileW
SetEnvironmentVariableA
LocalFree
LCMapStringA
InterlockedExchange
GetStringTypeW
IsDebuggerPresent
Process32NextW
GetStdHandle
CreateFileMappingW
GetFileSize
UnmapViewOfFile
GetConsoleMode
GetProcessHeap
HeapAlloc
GetConsoleCP
GetModuleHandleA
SetUnhandledExceptionFilter
DeleteCriticalSection
ExpandEnvironmentStringsW
GetACP
GlobalAddAtomA
CancelWaitableTimer
OutputDebugStringW
VirtualProtectEx
OpenWaitableTimerA
OpenWaitableTimerW
AddAtomA
GlobalFindAtomW
CancelIo
GetVersion
HeapSize
OpenThread
MapViewOfFile
ReadProcessMemory
CompareStringA
GetLogicalDrives
lstrlenW
CompareStringW
Module32NextW
SetEndOfFile
WideCharToMultiByte
FindResourceW
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
SizeofResource
GetOEMCP
OpenProcess
EnterCriticalSection
SetStdHandle
GetModuleFileNameW
GetVersionExW
ReadFile
LoadResource
FreeEnvironmentStringsW
WritePrivateProfileStringW
Process32FirstW
SetLastError
GetStartupInfoA
GetCurrentProcessId
GetTempPathW
RemoveDirectoryW
CreateToolhelp32Snapshot
GetCPInfo
TlsFree
CreateThread
SetFilePointer
FlushInstructionCache
GetTempFileNameW
GetDriveTypeW
GetLocalTime
LoadLibraryExW
HeapFree
IsProcessorFeaturePresent
FlushFileBuffers
SetConsoleCtrlHandler
GetModuleHandleW
GetVolumeInformationW
GetCurrentProcess
CreateFileA
GetFileType
GetEnvironmentStringsW

user32

GetParent
SetWindowTextW
PeekMessageW
DestroyMenu
GetMessageW
GetMenuItemInfoW
CreatePopupMenu
LoadStringA
TrackPopupMenuEx
SendMessageW
SetCursor
GetClassInfoExW
RemoveMenu
SetWindowLongW
GetWindowTextW
LoadImageW
GetWindowLongW
LoadStringW
TrackMouseEvent
MapWindowPoints
EnumChildWindows
MessageBeep
UpdateLayeredWindow
ReleaseDC
ScreenToClient
TranslateAcceleratorW
CharNextW
AppendMenuW
GetMenuItemCount
DispatchMessageW
CallWindowProcW
SetWindowPos
GetWindow
KillTimer
UnregisterClassA
SetFocus
GetCursorPos
MonitorFromWindow
EnumWindows
GetClassNameW
PostQuitMessage
LoadMenuW
SetTimer
GetMonitorInfoW
DestroyCursor
InvalidateRect
DefWindowProcW
PostMessageW
SetForegroundWindow
IsWindowEnabled
wsprintfW
GetForegroundWindow
CharUpperW
DrawTextW
TranslateMessage
PtInRect
GetWindowThreadProcessId
IsWindow
GetFocus
GetWindowRect
LoadCursorW
GetClientRect
MonitorFromPoint
GetWindowDC
LoadAcceleratorsW
DestroyWindow
ShowWindow
RegisterClassExW

gdi32

SetBitmapBits
SaveDC
CreateDIBSection
DeleteDC
RestoreDC
CreateCompatibleBitmap
SetTextColor
CreateFontW
SetBkMode
GetBitmapBits
DeleteObject
SelectObject
CreateCompatibleDC

advapi32

OpenServiceW
RegDeleteKeyW
RegOpenKeyW
SetEntriesInAclW
ControlService
CloseServiceHandle
GetNamedSecurityInfoW
RegEnumKeyExW
FreeSid
OpenProcessToken
LookupPrivilegeValueW
DuplicateTokenEx
AllocateAndInitializeSid
QueryServiceStatus
AdjustTokenPrivileges
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
RevertToSelf
DeleteService
RegCloseKey
RegQueryInfoKeyW
OpenSCManagerW
RegSetValueExW
RegOpenKeyExW
SetTokenInformation
CreateServiceW
StartServiceW
CreateProcessAsUserW
SetNamedSecurityInfoW
RegEnumValueW

shell32

SHGetMalloc
SHFileOperationW
SHGetSpecialFolderPathW

ole32

CoCreateInstance
CoTaskMemFree
CoCreateGuid
CoInitializeSecurity
CoTaskMemAlloc
CoTaskMemRealloc
CoSetProxyBlanket
CoInitialize
CoUninitialize

oleaut32

VariantChangeType
SysFreeString
VariantClear
GetErrorInfo
SysStringLen
SysAllocString
CreateErrorInfo
VarUI4FromStr
SetErrorInfo
VariantInit
SysAllocStringByteLen

winhttp

WinHttpQueryHeaders
WinHttpReadData
WinHttpOpen
WinHttpSetOption
WinHttpCloseHandle
WinHttpSendRequest
WinHttpOpenRequest
WinHttpReceiveResponse
WinHttpConnect

comctl32

InitCommonControlsEx

shlwapi

PathStripPathW
PathAppendW
PathIsDirectoryW
PathFindFileNameW
PathGetDriveNumberW
StrStrIW
PathRemoveFileSpecW
PathRemoveExtensionW
SHDeleteKeyW
PathFindExtensionW
PathFileExistsW

msimg32

GradientFill
AlphaBlend

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

iphlpapi

GetIpForwardTable

oledlg

ord8
OleUIBusyW

wtsapi32

WTSEnumerateSessionsW
WTSFreeMemory

psapi

GetModuleFileNameExW
GetProcessMemoryInfo
QueryWorkingSet
GetModuleInformation

msvcrt

_exit
__set_app_type
_CIsin
_except_handler3

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e4b332df0b9648b95a11a31ddf7cfac8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

winhttp

comctl32

shlwapi

msimg32

version

iphlpapi

oledlg

wtsapi32

psapi

msvcrt

userenv

Sections

.text Size: 61KB - Virtual size: 61KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 17KB - Virtual size: 20KB

.rsrc Size: 35KB - Virtual size: 35KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 61KB - Virtual size: 61KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 17KB - Virtual size: 20KB

.rsrc
Size: 35KB - Virtual size: 35KB

.reloc
Size: 8KB - Virtual size: 8KB