VirusShare_3abf9945c4dde8c25be9fa8469d7c036 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_3abf9945c4dde8c25be9fa8469d7c036
Size

179KB
MD5

3abf9945c4dde8c25be9fa8469d7c036
SHA1

4714cc86805929773c85a3f188372bb583c48390
SHA256

a2e979eadf4ca3e5f37f2ad908c726a41d1471fb243a2ecaa1d924d3b151c523
SHA512

4d2da2ad36c6ff37c7da4feb5c2f845d18c8c72ad1f2ca64ad885cf708a4fc5e9d024e099db316c1e00f3f6ebf6fa36691f40065dc12fd5753fb18292773a0a1
SSDEEP

3072:Dk0tgvyUO7tEfGlbmYxE0sZRlbhBzieMA8+3VlthuqBl3tlfpXOTlJmoyMJhjKax:mxO7eudNsNtBziVRethTlPRUmDeKmw4z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_3abf9945c4dde8c25be9fa8469d7c036

Files

VirusShare_3abf9945c4dde8c25be9fa8469d7c036
.exe windows:4 windows x86 arch:x86

b685f9ebd4c3d044604741ab8325b01e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetStockObject

user32

PostQuitMessage
RegisterClassExA
SendMessageA
SetFocus
MoveWindow
SetWindowLongA
SetWindowWord
ShowWindow
TranslateMessage
UpdateWindow
MessageBoxA
LoadIconA
LoadCursorA
GetWindowTextA
GetSystemMetrics
GetMessageA
GetClientRect
GetClassNameA
EnumWindows
DispatchMessageA
DefWindowProcA
CreateWindowExA
CallWindowProcA
SetForegroundWindow

kernel32

ExitProcess
VirtualProtect
Sleep
RtlZeroMemory
LoadLibraryA
GetModuleHandleA
GetLastError
GetCommandLineA
CreateThread

comctl32

InitCommonControls

msvcrt

atoi

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ