VirusShare_32f0b1048db961594dac987b7eeb9cef

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_32f0b1048db961594dac987b7eeb9cef
Size

151KB
MD5

32f0b1048db961594dac987b7eeb9cef
SHA1

5d86aa73a0a21efa7f4368917ea1dc8a23120784
SHA256

a33ab1057bdb8e2c7b5309377becf8f6a77692286175775382205880cca8f8dc
SHA512

ef8201959614e25c06f4c27536819b46b03299041d9bd6bd63671b04185cbd8458fc917526bf2793649d4ec392573ff0a3438ea11682359d73acdb2d31b0942f
SSDEEP

3072:0aGvvqvfE332OBAtmZI24tDfPKzTEELQy929uFg7:03qvxAUmZI1ilsQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_32f0b1048db961594dac987b7eeb9cef

Files

VirusShare_32f0b1048db961594dac987b7eeb9cef
.exe windows:5 windows x86 arch:x86

a5452a8a020e420f84422d7c4fb1e4b4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsA
DosDateTimeToFileTime
Sleep
IsDebuggerPresent
CreateFileW
lstrcpynA
GetProcessHeap
GlobalDeleteAtom
GlobalUnlock
GlobalHandle
GetVolumeInformationA
lstrcmpA
DeleteCriticalSection
CloseHandle
GetConsoleMode
GetCommandLineA
FlushFileBuffers
WideCharToMultiByte
GetEnvironmentStringsW
SetFileTime
OpenFile
GetDiskFreeSpaceA
GetFullPathNameA
SetStdHandle
SetLastError
UnhandledExceptionFilter
InterlockedDecrement
GetModuleFileNameA
FindResourceA
QueryPerformanceFrequency
MapViewOfFile
GetShortPathNameA
GetModuleFileNameW
TlsFree
LocalFree
WriteFile
LocalAlloc
SetHandleCount
GetCurrentDirectoryA
GetTimeZoneInformation
MoveFileA
WriteConsoleW
LoadLibraryA
CompareFileTime
GetDriveTypeW
CreateEventA
MultiByteToWideChar
WaitForSingleObject
LockResource
RaiseException
HeapCreate
EnumResourceLanguagesA
GetLocaleInfoA
GetCurrentDirectoryW
CreateThread
GetSystemInfo
EnterCriticalSection
SetThreadPriority
GlobalLock
HeapSize
FindNextChangeNotification
GetPrivateProfileIntA
SystemTimeToFileTime
LocalUnlock
SetErrorMode
GetNumberFormatA
CreateFileA
GetProcAddress
GlobalFindAtomA
TlsGetValue
FindFirstChangeNotificationA
GetStringTypeExA
SetFilePointer
FreeEnvironmentStringsW
GetStdHandle
GetVersionExA
WinExec
GetLocalTime
GetFileSizeEx
GetCurrentThread
CreateFileMappingA
FindResourceExA
InterlockedExchange
ResumeThread
CompareStringW
FreeLibrary
FindResourceW
lstrcmpiA
GetOEMCP
FindCloseChangeNotification
GetUserDefaultLangID
DeleteFileA
WritePrivateProfileStringA
lstrcatA
GlobalFlags
GlobalAddAtomA
LocalFileTimeToFileTime
QueryPerformanceCounter
LoadLibraryW
GetStringTypeW
LoadLibraryExA
SizeofResource
LoadResource
GetWindowsDirectoryA
GetFileTime
LockFile
GetConsoleCP
GetSystemDefaultUILanguage
CreateDirectoryA
GetSystemDirectoryW
TlsAlloc
ResetEvent
RtlUnwind
GetDriveTypeA
lstrcmpW
GlobalFree
GetFileAttributesA
TerminateProcess
HeapFree
GetCurrentProcess
ConvertDefaultLocale
IsValidCodePage
MulDiv
GetUserDefaultUILanguage
UnlockFile
lstrcpyA
WaitForMultipleObjects
SetEnvironmentVariableA
SearchPathA
GetFileAttributesExA
LCMapStringW
LocalReAlloc
FileTimeToSystemTime
GlobalSize
GetStartupInfoW
GetSystemTimeAsFileTime
lstrlenA
GetTempFileNameA
FreeResource
SetUnhandledExceptionFilter
GetPrivateProfileStringA
GetCurrentProcessId
GetProfileIntA
HeapAlloc
FileTimeToDosDateTime
CreateProcessA
SetCurrentDirectoryA
GlobalGetAtomNameA
GetThreadLocale
CopyFileA
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
GetCPInfo
LeaveCriticalSection
SuspendThread
IsProcessorFeaturePresent
lstrlenW
InterlockedIncrement
GetLastError
GetFileType
GetTempPathA
FileTimeToLocalFileTime
GetCurrentThreadId
SetFileAttributesA
SetEvent
GlobalReAlloc
SetEndOfFile
GetFileInformationByHandle
GetFileSize
DuplicateHandle
CompareStringA
GetACP
FindResourceExW
HeapSetInformation
TlsSetValue
SetPriorityClass
LocalLock
VirtualProtect
GetModuleHandleA
GlobalFindAtomW
FindAtomA
GetTickCount
HeapQueryInformation

user32

PostMessageW
PostQuitMessage
GetWindowTextW
KillTimer
IsWindow
SetFocus
EnumChildWindows
GetWindow
SendMessageW
LoadMenuW
GetWindowThreadProcessId
DrawTextW
MonitorFromPoint
SetWindowLongW
GetMonitorInfoW
GetWindowRect
TranslateMessage
GetClientRect
GetWindowLongW
ReleaseDC
DispatchMessageW
LoadImageW
TrackPopupMenuEx
MonitorFromWindow
SetWindowTextW
GetWindowDC
CallWindowProcW
GetCursorPos
SetTimer
GetMenuItemInfoW
AppendMenuW
SetCursor
PeekMessageW
GetMessageW
RemoveMenu
GetMenuItemCount
DestroyMenu
UnregisterClassA
InvalidateRect
EnumWindows
CreatePopupMenu
GetFocus
DestroyCursor
SetWindowPos
DestroyWindow
LoadStringA
LoadIconA
IsWindowEnabled
CharLowerW
GetForegroundWindow
GetKeyboardLayout
IsWindowVisible
EnableWindow
ScreenToClient
LoadCursorW
DefWindowProcW
TrackMouseEvent
ShowWindow
GetClassNameW
MapWindowPoints
CharNextW
GetParent
PtInRect
TranslateAcceleratorW
MessageBeep
UpdateLayeredWindow
LoadStringW

gdi32

CloseFigure
BeginPath
AddFontMemResourceEx

advapi32

SetTokenInformation
CreateServiceW
OpenServiceW
RegisterEventSourceW
RegOpenKeyA
SetNamedSecurityInfoW
RegQueryValueExW
DeleteService
CreateProcessAsUserW
RegisterServiceCtrlHandlerExW
ChangeServiceConfigW
BuildExplicitAccessWithNameW
DeregisterEventSource
GetNamedSecurityInfoW
RegOpenKeyExW
RegCreateKeyW
StartServiceCtrlDispatcherW
EnumDependentServicesW
ReportEventW
QueryServiceStatusEx
RegCreateKeyExW
DuplicateTokenEx
SetServiceStatus
RegEnumKeyW
SetEntriesInAclW
RegCloseKey
RevertToSelf
OpenSCManagerW
RegSetValueExW
GetTokenInformation
ControlService
OpenProcessToken
StartServiceW
CloseServiceHandle

shell32

SHEmptyRecycleBinW
SHGetSpecialFolderPathW

ole32

CoInitialize

shlwapi

PathFindFileNameW
PathCombineW
PathFileExistsW
StrStrIW
PathRemoveFileSpecW
PathAppendW
PathQuoteSpacesW

version

VerQueryValueW

oledlg

OleUIBusyW
ord8

wtsapi32

WTSEnumerateSessionsW
WTSFreeMemory

psapi

GetModuleFileNameExW
GetModuleInformation

msvcrt

_CIsin
_CIcos
exit
_except_handler3
free
malloc
__set_app_type

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data5
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5452a8a020e420f84422d7c4fb1e4b4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

version

oledlg

wtsapi32

psapi

msvcrt

Sections

.text Size: 69KB - Virtual size: 68KB

.data5 Size: 512B - Virtual size: 4B

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 25KB - Virtual size: 69KB

.rsrc Size: 29KB - Virtual size: 29KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 69KB - Virtual size: 68KB

.data5
Size: 512B - Virtual size: 4B

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 25KB - Virtual size: 69KB

.rsrc
Size: 29KB - Virtual size: 29KB

.reloc
Size: 7KB - Virtual size: 7KB