VirusShare_1bac8e4ca91f28055732eacd1fd1400b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_1bac8e4ca91f28055732eacd1fd1400b
Size

179KB
MD5

1bac8e4ca91f28055732eacd1fd1400b
SHA1

4ce15c774ec4e7d9c44434f6e3b6f472da284da0
SHA256

c363ec249bdc92f1325620b6961fd524995fba8bee7d98e0c32e1a871fcdb9ad
SHA512

7c0cfbebdbce4a872d3ff0c69deeb84aea3b10e0c22a68b3126753d01980603cbe7045884cd2063b701dfcf810b3edd25c5c5bd215866eefdf6b9b1351609a3e
SSDEEP

3072:Dk0tgvyUO7tEfGlbmYxE0sZRlbhBzieMA8+3VlthuqBl3tlfpXOTlJmoyMJhjKaM:mxO7eudNsNtBziVRethTlPRUmDeKmw4O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_1bac8e4ca91f28055732eacd1fd1400b

Files

VirusShare_1bac8e4ca91f28055732eacd1fd1400b
.exe windows:4 windows x86 arch:x86

b685f9ebd4c3d044604741ab8325b01e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetStockObject

user32

PostQuitMessage
RegisterClassExA
SendMessageA
SetFocus
MoveWindow
SetWindowLongA
SetWindowWord
ShowWindow
TranslateMessage
UpdateWindow
MessageBoxA
LoadIconA
LoadCursorA
GetWindowTextA
GetSystemMetrics
GetMessageA
GetClientRect
GetClassNameA
EnumWindows
DispatchMessageA
DefWindowProcA
CreateWindowExA
CallWindowProcA
SetForegroundWindow

kernel32

ExitProcess
VirtualProtect
Sleep
RtlZeroMemory
LoadLibraryA
GetModuleHandleA
GetLastError
GetCommandLineA
CreateThread

comctl32

InitCommonControls

msvcrt

atoi

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ