VirusShare_8b6bc36cf0fc6db4fe7f2257cdc75905

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_8b6bc36cf0fc6db4fe7f2257cdc75905
Size

159KB
MD5

8b6bc36cf0fc6db4fe7f2257cdc75905
SHA1

337a7e0023ba2da14f6a1bc4cf6dc341ce82578b
SHA256

526429593277d9ce00d15d0b42339067c3c50edee9f82eee6ef180163479dedd
SHA512

0cbc411a646949e9d4009b2cf5a25639ec43d2f06957e410ff6142613992b412b604457eb3ec09772f34b8c1643ad33ea38aa87660f66a43c7ce565ac455f514
SSDEEP

3072:Nt40ah2B38sdVGB6n9ExJyoa8KUl7mixivYOFKjeqNOLfYEv:N+23wusJGXsj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_8b6bc36cf0fc6db4fe7f2257cdc75905

Files

VirusShare_8b6bc36cf0fc6db4fe7f2257cdc75905
.exe windows:5 windows x86 arch:x86

ec7b38da73cbb36c327de9afaff6427b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
VirtualFree
GetPrivateProfileIntW
DeviceIoControl
GetCommandLineW
IsValidLocale
FindFirstFileW
HeapCreate
WriteFile
InitializeCriticalSectionAndSpinCount
GetFileAttributesW
GetPrivateProfileSectionW
UnhandledExceptionFilter
GetDiskFreeSpaceExW
SetEvent
GetLastError
GetTimeFormatA
GetModuleFileNameA
ExitProcess
HeapReAlloc
WriteConsoleW
WaitForSingleObject
GetDateFormatA
VirtualQueryEx
InterlockedCompareExchange
CreateMutexW
VirtualAlloc
GetTickCount
GlobalMemoryStatus
CreateProcessW
LoadLibraryA
LeaveCriticalSection
GetProcAddress
GetUserDefaultLCID
GetFileSizeEx
GetStartupInfoW
HeapDestroy
IsValidCodePage
TerminateProcess
GetConsoleOutputCP
CloseHandle
GetTimeZoneInformation
ProcessIdToSessionId
CreateEventW
lstrlenA
RaiseException
TlsAlloc
InterlockedIncrement
FatalAppExitA
TlsGetValue
LockResource
TlsSetValue
GetStringTypeA
RtlUnwind
InterlockedDecrement
MultiByteToWideChar
WriteConsoleA
FindNextFileW
GetLocaleInfoW
LCMapStringW
ExitThread
SystemTimeToFileTime
CreateFileW
LoadLibraryW
MoveFileExW
FindResourceExW
CreateDirectoryW
GetCurrentThreadId
Module32FirstW
FreeLibrary
InitializeCriticalSection
GetLocaleInfoA
QueryPerformanceCounter
lstrcmpiW
EnumSystemLocalesA
SetHandleCount
OpenFileMappingW
GetCurrentThread
Sleep
DeleteFileW
SetEnvironmentVariableA
LocalFree
LCMapStringA
InterlockedExchange
GetStringTypeW
IsDebuggerPresent
Process32NextW
GetStdHandle
CreateFileMappingW
GetFileSize
UnmapViewOfFile
GetConsoleMode
GetProcessHeap
HeapAlloc
GetConsoleCP
GetModuleHandleA
SetUnhandledExceptionFilter
DeleteCriticalSection
ExpandEnvironmentStringsW
GetACP
GlobalAddAtomA
CancelWaitableTimer
OutputDebugStringW
VirtualProtectEx
OpenWaitableTimerA
OpenWaitableTimerW
AddAtomA
GlobalFindAtomW
CancelIo
GetVersion
AreFileApisANSI
HeapSize
OpenThread
MapViewOfFile
ReadProcessMemory
CompareStringA
GetLogicalDrives
lstrlenW
CompareStringW
Module32NextW
SetEndOfFile
WideCharToMultiByte
FindResourceW
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
SizeofResource
GetOEMCP
OpenProcess
EnterCriticalSection
SetStdHandle
GetModuleFileNameW
GetVersionExW
ReadFile
LoadResource
FreeEnvironmentStringsW
WritePrivateProfileStringW
Process32FirstW
SetLastError
GetStartupInfoA
GetCurrentProcessId
GetTempPathW
RemoveDirectoryW
CreateToolhelp32Snapshot
GetCPInfo
TlsFree
CreateThread
SetFilePointer
FlushInstructionCache
GetTempFileNameW
GetDriveTypeW
GetLocalTime
LoadLibraryExW
HeapFree
IsProcessorFeaturePresent
FlushFileBuffers
SetConsoleCtrlHandler
GetModuleHandleW
GetVolumeInformationW
GetCurrentProcess
CreateFileA
GetFileType
GetEnvironmentStringsW

user32

GetWindowLongW
GetParent
SetWindowTextW
PeekMessageW
DestroyMenu
GetMessageW
GetMenuItemInfoW
CreatePopupMenu
LoadStringA
TrackPopupMenuEx
SendMessageW
SetCursor
GetClassInfoExW
RemoveMenu
SetWindowLongW
GetWindowTextW
DispatchMessageW
ShowWindow
LoadStringW
TrackMouseEvent
MapWindowPoints
EnumChildWindows
MessageBeep
UpdateLayeredWindow
ReleaseDC
ScreenToClient
TranslateAcceleratorW
CharNextW
AppendMenuW
GetMenuItemCount
CallWindowProcW
SetWindowPos
GetWindow
KillTimer
UnregisterClassA
SetFocus
GetCursorPos
MonitorFromWindow
PostQuitMessage
EnumWindows
GetClassNameW
LoadMenuW
SetTimer
GetMonitorInfoW
DestroyCursor
InvalidateRect
DefWindowProcW
PostMessageW
SetForegroundWindow
IsWindowEnabled
wsprintfW
GetForegroundWindow
CharUpperW
GetDesktopWindow
DrawTextW
TranslateMessage
PtInRect
GetWindowThreadProcessId
IsWindow
GetFocus
GetWindowRect
LoadCursorW
GetClientRect
MonitorFromPoint
GetWindowDC
LoadAcceleratorsW
DestroyWindow
LoadImageW
RegisterClassExW

gdi32

SetBitmapBits
SaveDC
CreateDIBSection
DeleteDC
RestoreDC
CreateCompatibleBitmap
SetTextColor
CreateFontW
SetBkMode
GetBitmapBits
DeleteObject
SelectObject
CreateCompatibleDC

advapi32

OpenServiceW
RegDeleteKeyW
RegOpenKeyW
SetEntriesInAclW
ControlService
CloseServiceHandle
GetNamedSecurityInfoW
RegEnumKeyExW
FreeSid
OpenProcessToken
LookupPrivilegeValueW
DuplicateTokenEx
AllocateAndInitializeSid
QueryServiceStatus
AdjustTokenPrivileges
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
RevertToSelf
DeleteService
RegCloseKey
RegQueryInfoKeyW
OpenSCManagerW
RegSetValueExW
RegOpenKeyExW
SetTokenInformation
CreateServiceW
StartServiceW
CreateProcessAsUserW
SetNamedSecurityInfoW
RegEnumValueW

shell32

SHGetMalloc
SHFileOperationW
SHGetSpecialFolderPathW

ole32

CoCreateInstance
CoTaskMemFree
CoCreateGuid
CoInitializeSecurity
CoTaskMemAlloc
CoTaskMemRealloc
CoSetProxyBlanket
CoInitialize
CoUninitialize

oleaut32

VariantChangeType
SysFreeString
VariantClear
GetErrorInfo
SysStringLen
SysAllocString
CreateErrorInfo
VarUI4FromStr
SetErrorInfo
VariantInit
SysAllocStringByteLen

winhttp

WinHttpQueryHeaders
WinHttpReadData
WinHttpOpen
WinHttpSetOption
WinHttpCloseHandle
WinHttpSendRequest
WinHttpOpenRequest
WinHttpReceiveResponse
WinHttpConnect

comctl32

InitCommonControlsEx

shlwapi

PathStripPathW
PathAppendW
PathIsDirectoryW
PathFindFileNameW
PathGetDriveNumberW
StrStrIW
PathRemoveFileSpecW
PathRemoveExtensionW
SHDeleteKeyW
PathFindExtensionW
PathFileExistsW

msimg32

GradientFill
AlphaBlend

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

iphlpapi

GetIpForwardTable

oledlg

ord8
OleUIBusyW

wtsapi32

WTSEnumerateSessionsW
WTSFreeMemory

psapi

GetModuleFileNameExW
GetProcessMemoryInfo
QueryWorkingSet
GetModuleInformation

msvcrt

_exit
__set_app_type
_CIsin
_except_handler3

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec7b38da73cbb36c327de9afaff6427b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

winhttp

comctl32

shlwapi

msimg32

version

iphlpapi

oledlg

wtsapi32

psapi

msvcrt

userenv

Sections

.text Size: 61KB - Virtual size: 61KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 17KB - Virtual size: 20KB

.rsrc Size: 35KB - Virtual size: 35KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 61KB - Virtual size: 61KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 17KB - Virtual size: 20KB

.rsrc
Size: 35KB - Virtual size: 35KB

.reloc
Size: 8KB - Virtual size: 8KB