VirusShare_38c90f2133ea2aa965878317033f4fe8

Sharing

Copy URL Twitter E-mail

General

Target
VirusShare_38c90f2133ea2aa965878317033f4fe8
Size 186KB
Sample240610-aerecshf55
SHA256 d1f01633169906cae748e3fbbdbeda77c3dadb9996202ad9b1fb1209f174eaf7
MD5 38c90f2133ea2aa965878317033f4fe8
SHA1 edbba09c2ef510a43f6068be3505f51378c52429
SHA512 f09c3c744637e3b941eefdcb312ec34537879f56e91f717acf61ceede15ddd24fe80e2790fa9fbc624d7fce609fac03cd2a808b603cd5717d9a06e79a6574234
SSDEEP 3072:zxTjiyhP5N8nGoKuBpSqIV7TUMnD7cT7tGtXdr8aTGB/uZtVwqzBfrpHGDA626:VTjDN5SIyfIV71nD7MGtBfTWqtVdzJpk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_38c90f2133ea2aa965878317033f4fe8

File Explorer

VirusShare_38c90f2133ea2aa965878317033f4fe8

.exe 186KB

VirusShare_38c90f2133ea2aa965878317033f4fe8

IMPHASH 72b43df30fc7f504b68edf6178223f51
SHA256 d1f01633169906cae748e3fbbdbeda77c3dadb9996202ad9b1fb1209f174eaf7
MD5 38c90f2133ea2aa965878317033f4fe8
SHA1 edbba09c2ef510a43f6068be3505f51378c52429
SHA512 f09c3c744637e3b941eefdcb312ec34537879f56e91f717acf61ceede15ddd24fe80e2790fa9fbc624d7fce609fac03cd2a808b603cd5717d9a06e79a6574234
SSDEEP 3072:zxTjiyhP5N8nGoKuBpSqIV7TUMnD7cT7tGtXdr8aTGB/uZtVwqzBfrpHGDA626:VTjDN5SIyfIV71nD7MGtBfTWqtVdzJpk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

77828

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateProcessA CloseHandle GetLastError OutputDebugStringA GetModuleFileNameA GetFullPathNameA AreFileApisANSI lstrcpyA SetLastError CreateMutexA lstrlenW FreeLibrary InterlockedDecrement lstrlenA LocalFree MultiByteToWideChar GetStartupInfoA GetProcAddress ExitProcess CancelWaitableTimer GetTickCount ActivateActCtx GlobalFindAtomA GetACP OpenWaitableTimerA OpenWaitableTimerW GetCurrentThreadId lstrcpynA VirtualProtect CancelIo GetFileAttributesA WideCharToMultiByte LoadLibraryA GetModuleHandleA GetOEMCP

user32

IsWindowUnicode GetDesktopWindow EnableWindow PtInRect GetWindowRect GetSystemMenu GetSystemMetrics ReleaseCapture SetCapture SetForegroundWindow GetForegroundWindow SendMessageA GetDlgCtrlID FillRect GetParent DrawTextA EnumChildWindows IsZoomed GetWindowTextA GrayStringA DefWindowProcA SetWindowTextA UpdateWindow wsprintfW IsWindowEnabled GetTopWindow OffsetRect TabbedTextOutA SetRect IsWindow

gdi32

Polyline TextOutA PtVisible LPtoDP CombineRgn SetPixel CreateRectRgn RectVisible BitBlt DPtoLP GetObjectA CreatePalette GetTextColor PtInRegion SetRectRgn CreatePolygonRgn CreateFontIndirectA

advapi32

RegQueryValueExW CryptDestroyHash RegEnumKeyW RegOpenKeyExW LsaClose EqualSid CryptReleaseContext LsaOpenPolicy RegSetValueExW CryptCreateHash IsTextUnicode RegCreateKeyExA RegOpenCurrentUser FreeSid CryptDestroyKey CryptAcquireContextA RegDeleteValueW CryptEncrypt RegEnumValueA RegQueryValueExA RegSetValueExA CryptDecrypt CryptDeriveKey RegDeleteValueA RegOpenKeyExA CryptHashData RegCloseKey LsaFreeMemory RegDeleteKeyW RegCreateKeyExW RegEnumValueW RegOpenKeyA

shell32

ShellExecuteA SHGetDesktopFolder SHGetMalloc SHGetPathFromIDListA

ole32

CoTaskMemFree CoCreateInstance CLSIDFromProgID CoUninitialize StringFromCLSID CoInitialize

comctl32

InitCommonControlsEx _TrackMouseEvent

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

oledlg

OleUIBusyW

msvcrt

__getmainargs _CIcos __p__fmode __set_app_type __setusermatherr __p__commode _splitpath exit _strdup _onexit _initterm _exit _XcptFilter free _setmbcp _controlfp _except_handler3 _CxxThrowException _mbsicmp _acmdln _vsnprintf __CxxFrameHandler ?terminate@@YAXXZ __dllonexit ??1type_info@@UAE@XZ _mbscmp _adjust_fdiv

Name

.text

Size

70KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

30KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

15KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data2

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

VirusShare_38c90f2133ea2aa965878317033f4fe8

kernel32

user32

gdi32

advapi32

shell32

ole32

comctl32

version

oledlg

msvcrt

generic