VirusShare_4f4085ad0a448cb9179b9a85018d967f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_4f4085ad0a448cb9179b9a85018d967f
Size

187KB
MD5

4f4085ad0a448cb9179b9a85018d967f
SHA1

fed8c2825c81df0d0df397dacc2bc2a31fe68926
SHA256

ae0f64395eff7ff5a663701271d77a495a19076e890e596cb9d2237aaf0f317a
SHA512

87eb3d32f6ff045259ab30262b091fab25b0fbafe039639821633c3815c0ef0fa14fe046258d0cbf6c2cff1d25517c2ed1d6eeb93d70ea356128157c0c6f8ac4
SSDEEP

3072:8vyvgmPW5SIx3dJE/+zLQ4qPjpQaMa0xZW0R1yZ7h1mV6yNO59cnNxzr:8weEIPJXkBZyPTR1y1G6WO/cv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_4f4085ad0a448cb9179b9a85018d967f

Files

VirusShare_4f4085ad0a448cb9179b9a85018d967f
.exe windows:5 windows x86 arch:x86

4404e650bd95e64d0179f9b7cf2daf85

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeviceIoControl
GetTempPathA
ProcessIdToSessionId
GetProcessTimes
FindResourceExA
FindFirstVolumeMountPointA
WriteConsoleA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ