VirusShare_5f1f58ddb10981ebac6768c1fa96d10b

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_5f1f58ddb10981ebac6768c1fa96d10b
Size

51KB
MD5

5f1f58ddb10981ebac6768c1fa96d10b
SHA1

74ce01b2433e0e1ca56be9028814c4554133e4ab
SHA256

3027176f531789fdf4d4feb51fd13ac4b3b0f8a27d41c1dc7d019954bf133bae
SHA512

b3a46995e9120b0b023c90aee4c884f8e3a15fa3170e81e87b64c50d30f5fb335c573cc6ad64cf1fc17723808d224db4e514166c34f7c94e047d05860580d622
SSDEEP

768:nsdieaQXMT5tihmUwlonK8zEDEXn+nmGvx/n1WwwwwCYfhhp2ilKbNKT:nsdhK+mUwloreJ/n0fh32iEhKT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_5f1f58ddb10981ebac6768c1fa96d10b

Files

VirusShare_5f1f58ddb10981ebac6768c1fa96d10b
.exe windows:5 windows x86 arch:x86

59b8c07a6ad2719883bdcfb4c1729d2e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TrackPopupMenu
SystemParametersInfoW
GetKeyboardLayoutNameW
DdePostAdvise
TrackPopupMenuEx
DdeFreeStringHandle
GetClipboardFormatNameA
BroadcastSystemMessageA
DrawEdge
SetClipboardData
IsClipboardFormatAvailable
UnregisterDeviceNotification
IsChild
CreateIcon
DdeDisconnect
SetCaretPos
GetScrollInfo
HideCaret
GetMenuState
ScrollWindow
GetWindowTextW
wsprintfA
IsIconic
MapVirtualKeyW
MessageBoxIndirectA
SetParent
DdeInitializeW
GetWindowThreadProcessId
InflateRect
GetClipCursor
RegisterHotKey
DestroyWindow
ShowWindowAsync

kernel32

GetEnvironmentStringsW
HeapReAlloc
HeapAlloc
HeapSize
MultiByteToWideChar
LCMapStringW
RtlUnwind
Sleep
HeapFree
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
GetStringTypeW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetLastError
CopyFileA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

59b8c07a6ad2719883bdcfb4c1729d2e

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: 3KB - Virtual size: 2KB