VirusShare_1f968d4bc76ee1e27ad22b2cb63d4eef

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_1f968d4bc76ee1e27ad22b2cb63d4eef
Size

133KB
MD5

1f968d4bc76ee1e27ad22b2cb63d4eef
SHA1

55ef167b4faf3c3dec85c87ba475f3288d28429a
SHA256

b9bae7530f598e5add0c85926923c07c9f1b10e760c0a2e0aa9887e5de42d4f5
SHA512

08b83ff9b9bf875f6a3e4c81b3bd46c90f95fec48dceef18e9fc18a97ad8fba5b90aa82201a6ddd0f362bc2fea6516e90336dee4b33f33ed686ee0eb9fad0624
SSDEEP

3072:xpIrgoBGElDTAlo7dW1ImeqdRpSEW33R1M0cakSDFpoK07ttCSoNvn:1oIP2UrBX8ZPM0YSBqKESSoN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_1f968d4bc76ee1e27ad22b2cb63d4eef

Files

VirusShare_1f968d4bc76ee1e27ad22b2cb63d4eef
.exe windows:5 windows x86 arch:x86

2638ffdcdcd84055d04e67a6a9ec63e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
SearchPathA
CreateFileMappingA
GetTempFileNameA
ReplaceFileA
EnumResourceNamesA
lstrlenW
SizeofResource
lstrcpyA
CloseHandle
SetFilePointer
GlobalAlloc
HeapQueryInformation
WaitForSingleObject
GetFileAttributesA
GlobalHandle
DuplicateHandle
GetModuleHandleW
GetFullPathNameA
CompareStringA
QueryPerformanceFrequency
GetPrivateProfileStringA
EnumResourceLanguagesA
LocalFileTimeToFileTime
CreateProcessA
RaiseException
SetErrorMode
DosDateTimeToFileTime
GlobalReAlloc
GetConsoleMode
HeapAlloc
GetDriveTypeA
lstrlenA
GetDriveTypeW
FindResourceW
TlsFree
GetTimeZoneInformation
FormatMessageA
MultiByteToWideChar
UnlockFile
SetEvent
FileTimeToSystemTime
GetUserDefaultLangID
LockFile
TerminateProcess
FileTimeToLocalFileTime
CopyFileA
WritePrivateProfileStringA
LockResource
lstrcatA
GetCurrentDirectoryA
CreateFileW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
GetFileInformationByHandle
LoadLibraryA
FindFirstChangeNotificationA
IsDebuggerPresent
HeapFree
FlushFileBuffers
FreeEnvironmentStringsW
SetPriorityClass
LoadLibraryExA
LoadLibraryW
SetHandleCount
TlsSetValue
lstrcmpA
GetStdHandle
GetCommandLineA
GetOEMCP
GetFileSizeEx
GetConsoleCP
InterlockedIncrement
GetModuleFileNameW
DeleteFileA
SuspendThread
IsValidCodePage
SetLastError
FreeLibrary
GetLocalTime
LocalLock
GetVersionExA
RemoveDirectoryA
FileTimeToDosDateTime
SetEndOfFile
LocalAlloc
WaitForMultipleObjects
GetLastError
LCMapStringW
CompareFileTime
InterlockedDecrement
FreeResource
lstrcpynA
HeapCreate
WriteFile
IsProcessorFeaturePresent
lstrcmpW
GetProcessHeap
FindNextChangeNotification
GetVolumeInformationA
CreateDirectoryA
GetCurrentThread
GetCurrentDirectoryW
SetUnhandledExceptionFilter
ExpandEnvironmentStringsA
CreateEventA
GlobalFlags
GlobalLock
HeapSize
GlobalFree
GetUserDefaultUILanguage
TlsAlloc
GetCPInfo
GetCurrentThreadId
GlobalDeleteAtom
LocalFree
GlobalGetAtomNameA
GetTempPathA
LoadResource
GlobalUnlock
InitializeCriticalSection
GetStringTypeW
FindResourceExW
MoveFileA
GetModuleFileNameA
GetProcAddress
MapViewOfFile
ResumeThread
GetEnvironmentStringsW
GlobalAddAtomA
LocalReAlloc
CreateThread
GetProfileIntA
GetWindowsDirectoryA
FindCloseChangeNotification
TlsGetValue
CompareStringW
MulDiv
HeapSetInformation
EnterCriticalSection
GetNumberFormatA
GetSystemInfo
GetShortPathNameA
GetPrivateProfileIntA
QueryPerformanceCounter
GetSystemDefaultUILanguage
WinExec
GetDiskFreeSpaceA
GetCurrentProcessId
GetStringTypeExA
GetFileTime
SetFileAttributesA
lstrcmpiA
FindResourceExA
GetSystemTimeAsFileTime
RtlUnwind
GetSystemDirectoryW
EnumResourceTypesA
LeaveCriticalSection
WriteConsoleW
SetEnvironmentVariableA
Sleep
ConvertDefaultLocale
GetFileAttributesExA
SetThreadPriority
GetFileSize
SetFileTime
SystemTimeToFileTime
ResetEvent
SetStdHandle
FindResourceA
GetThreadLocale
GlobalFindAtomA
GlobalSize
InterlockedExchange
SetCurrentDirectoryA
CreateFileA
DeleteCriticalSection
GetFileType
GetLocaleInfoA
WideCharToMultiByte
OpenFile
GlobalAddAtomW
GetVersion
VirtualProtect
CancelIo
GetModuleHandleA
AddAtomA
AddAtomW
GetACP
GetTickCount
CancelWaitableTimer
GetCurrentProcess
GetStartupInfoW

user32

GetCursorPos
DrawTextW
SetTimer
GetFocus
DestroyMenu
MessageBeep
LoadImageW
RemoveMenu
MonitorFromPoint
LoadMenuW
DefWindowProcW
CallWindowProcW
PeekMessageW
MapWindowPoints
EnumChildWindows
EnumWindows
TrackMouseEvent
DispatchMessageW
GetMenuItemCount
SetWindowLongW
GetWindowRect
GetClassNameW
ScreenToClient
GetMessageW
InvalidateRect
UnregisterClassA
SetWindowPos
UpdateLayeredWindow
LoadCursorW
LoadStringW
GetMenuItemInfoW
SetCursor
DestroyCursor
SetFocus
MonitorFromWindow
AppendMenuW
GetWindow
SetWindowTextW
GetParent
TranslateAcceleratorW
GetWindowThreadProcessId
PtInRect
DestroyWindow
SetForegroundWindow
LoadStringA
LoadIconA
GetForegroundWindow
GetKeyboardLayout
CharLowerA
GetDesktopWindow
IsWindowVisible
EnableWindow
ShowWindow
PostMessageW
SendMessageW
GetWindowTextW
TranslateMessage
GetClientRect
KillTimer
GetWindowDC
CreatePopupMenu
GetMonitorInfoW
IsWindow
GetWindowLongW
ReleaseDC
CharNextW
TrackPopupMenuEx
PostQuitMessage

gdi32

CloseFigure
BeginPath
AbortPath
AngleArc

advapi32

SetNamedSecurityInfoW
EnumDependentServicesW
BuildExplicitAccessWithNameW
SetServiceStatus
CloseServiceHandle
SetEntriesInAclW
RegOpenKeyExW
OpenSCManagerW
RegOpenKeyW
StartServiceW
RegCreateKeyExW
RegCloseKey
RegCreateKeyW
QueryServiceStatusEx
RegSetValueExW
SetTokenInformation
OpenServiceW
ReportEventW
RegisterServiceCtrlHandlerExW
RevertToSelf
CreateServiceW
GetNamedSecurityInfoW
RegQueryValueExW
CreateProcessAsUserW
ControlService
DuplicateTokenEx
GetTokenInformation
StartServiceCtrlDispatcherW
DeregisterEventSource
ChangeServiceConfigW
OpenProcessToken
RegEnumKeyW
DeleteService
RegisterEventSourceW

shell32

SHGetMalloc
SHEmptyRecycleBinW
SHGetSpecialFolderPathW

ole32

CoInitialize

shlwapi

PathCombineW
PathRemoveFileSpecW
StrStrIW
PathFindFileNameW
PathQuoteSpacesW
PathAppendW
PathFileExistsW

version

VerQueryValueW

oledlg

ord8
OleUIBusyW

wtsapi32

WTSEnumerateSessionsW
WTSFreeMemory

psapi

GetModuleBaseNameA
GetModuleInformation
GetModuleFileNameExW

msvcrt

_except_handler3
_CIsin
_CIcos
exit
__set_app_type
_exit

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2638ffdcdcd84055d04e67a6a9ec63e6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

version

oledlg

wtsapi32

psapi

msvcrt

Sections

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 18KB - Virtual size: 78KB

.rsrc Size: 25KB - Virtual size: 25KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 18KB - Virtual size: 78KB

.rsrc
Size: 25KB - Virtual size: 25KB

.reloc
Size: 4KB - Virtual size: 4KB