VirusShare_c296b0feba2476decb0c90b2616bae59 | Triage

Sharing

General

Target

VirusShare_c296b0feba2476decb0c90b2616bae59
Size

518KB
MD5

c296b0feba2476decb0c90b2616bae59
SHA1

cae908847fd7788d20592574bae9a552d21edd88
SHA256

ddf176666832be1bf4355a137be1a6187d724304a1de0a5b779beb89e15c51d7
SHA512

dffb54bb753df6a9274ec0d0981931840fc33cd292eaf95945861914b11208d9f42f4988e28271a89623e51865fece631d05338ff085dd3916a4edb9eaca2a03
SSDEEP

12288:nGrAjevZMSm+R5vWnnm4F5vYrGdT9QRq4KjUBc3yj4oT:uAjeBMSBRNEP5ArGAR+jseyjn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_c296b0feba2476decb0c90b2616bae59

Files

VirusShare_c296b0feba2476decb0c90b2616bae59
.exe windows:4 windows x86 arch:x86

4d2d802e75aea7b2026cf43939a37b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
VirtualAllocEx
GetModuleHandleA
OpenEventA
GetTimeFormatW
FoldStringA
GetDiskFreeSpaceA
CreateMutexA
GetShortPathNameW
WriteConsoleW
GetDriveTypeA
CreateEventA
lstrcatA
GetStringTypeA
lstrlenA
SetEnvironmentVariableA
GetTickCount
GetVolumeInformationW
HeapFree

msdtcprx

DTC_XaOpen
DTC_XaEnd
DTC_XaPrepare
DTC_XaStart

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 493KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ