VirusShare_9d7fd6629e77a09e5228ea879334c39a

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_9d7fd6629e77a09e5228ea879334c39a
Size

164KB
MD5

9d7fd6629e77a09e5228ea879334c39a
SHA1

827fa0603ffe62666adaf91588e5b6cf02be1187
SHA256

7b04f808b321229384ee4f369d39b67f03fce9cd7493c2e5fb429eaae09a2fe9
SHA512

b45fd86675c4484fc44ecf786f5481396f9eca057469e6e1b533f080e7654204084b0ce24b50e4c79f259507f6a1ff10294f716236dda80a19f62843e8e95b72
SSDEEP

3072:t0ILjG2GYKs72LpW9X6Avm/KUl7zix1C0immWAmYVwE0u:t0YK23F2LY96NP4C0Hd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_9d7fd6629e77a09e5228ea879334c39a

Files

VirusShare_9d7fd6629e77a09e5228ea879334c39a
.exe windows:5 windows x86 arch:x86

eb27200bc06e5185aab006a13d0b2e58

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
VirtualFree
GetPrivateProfileIntW
DeviceIoControl
GetCommandLineW
IsValidLocale
FindFirstFileW
HeapCreate
WriteFile
InitializeCriticalSectionAndSpinCount
GetFileAttributesW
GetPrivateProfileSectionW
UnhandledExceptionFilter
GetDiskFreeSpaceExW
SetEvent
GetLastError
GetTimeFormatA
GetModuleFileNameA
ExitProcess
HeapReAlloc
WriteConsoleW
WaitForSingleObject
GetDateFormatA
VirtualQueryEx
InterlockedCompareExchange
CreateMutexW
VirtualAlloc
GetTickCount
GlobalMemoryStatus
CreateProcessW
LoadLibraryA
LeaveCriticalSection
GetProcAddress
GetUserDefaultLCID
GetFileSizeEx
GetStartupInfoW
HeapDestroy
IsValidCodePage
TerminateProcess
GetConsoleOutputCP
CloseHandle
GetTimeZoneInformation
ProcessIdToSessionId
CreateEventW
lstrlenA
RaiseException
TlsAlloc
InterlockedIncrement
FatalAppExitA
TlsGetValue
LockResource
TlsSetValue
GetStringTypeA
RtlUnwind
InterlockedDecrement
MultiByteToWideChar
WriteConsoleA
FindNextFileW
GetLocaleInfoW
LCMapStringW
ExitThread
SystemTimeToFileTime
CreateFileW
LoadLibraryW
MoveFileExW
FindResourceExW
CreateDirectoryW
GetCurrentThreadId
Module32FirstW
FreeLibrary
InitializeCriticalSection
GetLocaleInfoA
QueryPerformanceCounter
lstrcmpiW
EnumSystemLocalesA
SetHandleCount
OpenFileMappingW
GetCurrentThread
Sleep
DeleteFileW
SetEnvironmentVariableA
LocalFree
LCMapStringA
InterlockedExchange
GetStringTypeW
IsDebuggerPresent
Process32NextW
GetStdHandle
CreateFileMappingW
GetFileSize
UnmapViewOfFile
GetConsoleMode
GetProcessHeap
HeapAlloc
GetConsoleCP
GetModuleHandleA
SetUnhandledExceptionFilter
DeleteCriticalSection
ExpandEnvironmentStringsW
GetACP
GlobalAddAtomA
CancelWaitableTimer
OutputDebugStringW
VirtualProtectEx
OpenWaitableTimerA
OpenWaitableTimerW
AddAtomA
GlobalFindAtomW
CancelIo
GetVersion
HeapSize
OpenThread
MapViewOfFile
ReadProcessMemory
CompareStringA
GetLogicalDrives
lstrlenW
CompareStringW
Module32NextW
SetEndOfFile
WideCharToMultiByte
FindResourceW
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
SizeofResource
GetOEMCP
OpenProcess
EnterCriticalSection
SetStdHandle
GetModuleFileNameW
GetVersionExW
ReadFile
LoadResource
FreeEnvironmentStringsW
WritePrivateProfileStringW
Process32FirstW
SetLastError
GetStartupInfoA
GetCurrentProcessId
GetTempPathW
RemoveDirectoryW
CreateToolhelp32Snapshot
GetCPInfo
TlsFree
CreateThread
SetFilePointer
FlushInstructionCache
GetTempFileNameW
GetDriveTypeW
GetLocalTime
LoadLibraryExW
HeapFree
IsProcessorFeaturePresent
FlushFileBuffers
SetConsoleCtrlHandler
GetModuleHandleW
GetVolumeInformationW
GetCurrentProcess
CreateFileA
GetFileType
GetEnvironmentStringsW

user32

GetWindowLongW
GetParent
SetWindowTextW
PeekMessageW
DestroyMenu
GetMessageW
GetMenuItemInfoW
CreatePopupMenu
LoadStringA
TrackPopupMenuEx
SendMessageW
SetCursor
GetClassInfoExW
RemoveMenu
SetWindowLongW
GetWindowTextW
DispatchMessageW
ShowWindow
LoadStringW
TrackMouseEvent
MapWindowPoints
EnumChildWindows
MessageBeep
UpdateLayeredWindow
ReleaseDC
ScreenToClient
TranslateAcceleratorW
CharNextW
AppendMenuW
GetMenuItemCount
CallWindowProcW
SetWindowPos
GetWindow
KillTimer
UnregisterClassA
SetFocus
GetCursorPos
MonitorFromWindow
PostQuitMessage
EnumWindows
GetClassNameW
LoadMenuW
SetTimer
GetMonitorInfoW
DestroyCursor
InvalidateRect
DefWindowProcW
PostMessageW
SetForegroundWindow
IsWindowEnabled
wsprintfW
GetForegroundWindow
CharUpperW
GetDesktopWindow
DrawTextW
TranslateMessage
PtInRect
GetWindowThreadProcessId
IsWindow
GetFocus
GetWindowRect
LoadCursorW
GetClientRect
MonitorFromPoint
GetWindowDC
LoadAcceleratorsW
DestroyWindow
LoadImageW
RegisterClassExW

gdi32

SetBitmapBits
SaveDC
CreateDIBSection
DeleteDC
RestoreDC
CreateCompatibleBitmap
SetTextColor
CreateFontW
SetBkMode
GetBitmapBits
DeleteObject
SelectObject
CreateCompatibleDC

advapi32

OpenServiceW
RegDeleteKeyW
RegOpenKeyW
SetEntriesInAclW
ControlService
CloseServiceHandle
GetNamedSecurityInfoW
RegEnumKeyExW
FreeSid
OpenProcessToken
LookupPrivilegeValueW
DuplicateTokenEx
AllocateAndInitializeSid
QueryServiceStatus
AdjustTokenPrivileges
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
RevertToSelf
DeleteService
RegCloseKey
RegQueryInfoKeyW
OpenSCManagerW
RegSetValueExW
RegOpenKeyExW
SetTokenInformation
CreateServiceW
StartServiceW
CreateProcessAsUserW
SetNamedSecurityInfoW
RegEnumValueW

shell32

SHGetMalloc
SHFileOperationW
SHGetSpecialFolderPathW

ole32

CoCreateInstance
CoTaskMemFree
CoCreateGuid
CoInitializeSecurity
CoTaskMemAlloc
CoTaskMemRealloc
CoSetProxyBlanket
CoInitialize
CoUninitialize

oleaut32

VariantChangeType
SysFreeString
VariantClear
GetErrorInfo
SysStringLen
SysAllocString
CreateErrorInfo
VarUI4FromStr
SetErrorInfo
VariantInit
SysAllocStringByteLen

winhttp

WinHttpQueryHeaders
WinHttpReadData
WinHttpOpen
WinHttpSetOption
WinHttpCloseHandle
WinHttpSendRequest
WinHttpOpenRequest
WinHttpReceiveResponse
WinHttpConnect

comctl32

InitCommonControlsEx

shlwapi

PathStripPathW
PathAppendW
PathIsDirectoryW
PathFindFileNameW
PathGetDriveNumberW
StrStrIW
PathRemoveFileSpecW
PathRemoveExtensionW
SHDeleteKeyW
PathFindExtensionW
PathFileExistsW

msimg32

GradientFill
AlphaBlend

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

iphlpapi

GetIpForwardTable

oledlg

ord8
OleUIBusyW

wtsapi32

WTSEnumerateSessionsW
WTSFreeMemory

psapi

GetModuleFileNameExW
GetProcessMemoryInfo
QueryWorkingSet
GetModuleInformation

msvcrt

_exit
__set_app_type
_CIsin
_except_handler3

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb27200bc06e5185aab006a13d0b2e58

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

winhttp

comctl32

shlwapi

msimg32

version

iphlpapi

oledlg

wtsapi32

psapi

msvcrt

userenv

Sections

.text Size: 61KB - Virtual size: 61KB

.rdata Size: 39KB - Virtual size: 38KB

.data Size: 17KB - Virtual size: 20KB

.rsrc Size: 36KB - Virtual size: 35KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 61KB - Virtual size: 61KB

.rdata
Size: 39KB - Virtual size: 38KB

.data
Size: 17KB - Virtual size: 20KB

.rsrc
Size: 36KB - Virtual size: 35KB

.reloc
Size: 10KB - Virtual size: 9KB