VirusShare_5bef9ada0ffb08b9815be30b556723a8

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_5bef9ada0ffb08b9815be30b556723a8
Size

160KB
MD5

5bef9ada0ffb08b9815be30b556723a8
SHA1

6a50a81ddec7768846ee5d6f3a3265a976d067e4
SHA256

0225bd7468ad74adf4ab3e2aadb03ab300151a042d9c3126c6502a8e08497233
SHA512

94c818caa64c8e5a122ae601fcae1fd69b2703db30bad133b97fffb85d55abfd8e6034047a0390fb82146611ffaa7db501933084910bba2b9033204c0ed2c87e
SSDEEP

3072:rgxvYfmLXB1RU6uxj2VROUCn22FhHZKqmixC6yclGLhOK64X90E3:rO2IOjggUOIT68ht

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_5bef9ada0ffb08b9815be30b556723a8

Files

VirusShare_5bef9ada0ffb08b9815be30b556723a8
.exe windows:5 windows x86 arch:x86

196dc0fa200ed8a1f2122be49fa80c3c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
VirtualFree
GetPrivateProfileIntW
DeviceIoControl
GetCommandLineW
IsValidLocale
FindFirstFileW
HeapCreate
WriteFile
InitializeCriticalSectionAndSpinCount
GetFileAttributesW
GetPrivateProfileSectionW
UnhandledExceptionFilter
GetDiskFreeSpaceExW
SetEvent
GetLastError
GetTimeFormatA
GetModuleFileNameA
ExitProcess
HeapReAlloc
WriteConsoleW
WaitForSingleObject
GetDateFormatA
VirtualQueryEx
InterlockedCompareExchange
CreateMutexW
VirtualAlloc
GetTickCount
GlobalMemoryStatus
CreateProcessW
LoadLibraryA
LeaveCriticalSection
GetProcAddress
GetUserDefaultLCID
GetFileSizeEx
GetStartupInfoW
HeapDestroy
IsValidCodePage
TerminateProcess
GetConsoleOutputCP
CloseHandle
GetTimeZoneInformation
ProcessIdToSessionId
CreateEventW
lstrlenA
RaiseException
TlsAlloc
InterlockedIncrement
FatalAppExitA
TlsGetValue
LockResource
TlsSetValue
GetStringTypeA
RtlUnwind
InterlockedDecrement
WriteConsoleA
FindNextFileW
MapViewOfFile
GetLocaleInfoW
LCMapStringW
ExitThread
SystemTimeToFileTime
CreateFileW
LoadLibraryW
MoveFileExW
FindResourceExW
CreateDirectoryW
GetCurrentThreadId
Module32FirstW
FreeLibrary
InitializeCriticalSection
GetLocaleInfoA
QueryPerformanceCounter
lstrcmpiW
EnumSystemLocalesA
SetHandleCount
OpenFileMappingW
GetCurrentThread
Sleep
DeleteFileW
SetEnvironmentVariableA
LocalFree
LCMapStringA
InterlockedExchange
GetStringTypeW
IsDebuggerPresent
Process32NextW
GetStdHandle
CreateFileMappingW
GetFileSize
UnmapViewOfFile
GetConsoleMode
GetProcessHeap
HeapAlloc
GetConsoleCP
GetModuleHandleA
SetUnhandledExceptionFilter
DeleteCriticalSection
ExpandEnvironmentStringsW
GetACP
GlobalAddAtomA
OutputDebugStringW
VirtualProtectEx
OpenWaitableTimerW
AddAtomA
GlobalFindAtomW
CancelIo
GetVersion
AreFileApisANSI
HeapSize
OpenThread
GetFileType
ReadProcessMemory
CompareStringA
GetLogicalDrives
lstrlenW
CompareStringW
Module32NextW
SetEndOfFile
WideCharToMultiByte
FindResourceW
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
SizeofResource
GetOEMCP
OpenProcess
EnterCriticalSection
SetStdHandle
GetModuleFileNameW
GetVersionExW
ReadFile
LoadResource
FreeEnvironmentStringsW
WritePrivateProfileStringW
Process32FirstW
SetLastError
GetStartupInfoA
GetCurrentProcessId
GetTempPathW
RemoveDirectoryW
CreateToolhelp32Snapshot
GetCPInfo
TlsFree
CreateThread
SetFilePointer
FlushInstructionCache
GetTempFileNameW
GetDriveTypeW
GetLocalTime
LoadLibraryExW
HeapFree
IsProcessorFeaturePresent
FlushFileBuffers
SetConsoleCtrlHandler
GetModuleHandleW
GetVolumeInformationW
GetCurrentProcess
CreateFileA
MultiByteToWideChar
GetEnvironmentStringsW

user32

GetWindowLongW
GetParent
SetWindowTextW
PeekMessageW
DestroyMenu
GetMessageW
GetMenuItemInfoW
CreatePopupMenu
LoadStringA
TrackPopupMenuEx
SendMessageW
SetCursor
GetClassInfoExW
RemoveMenu
SetWindowLongW
GetWindowTextW
DispatchMessageW
ShowWindow
LoadStringW
TrackMouseEvent
MapWindowPoints
EnumChildWindows
MessageBeep
UpdateLayeredWindow
ReleaseDC
ScreenToClient
TranslateAcceleratorW
CharNextW
AppendMenuW
GetMenuItemCount
CallWindowProcW
SetWindowPos
GetWindow
KillTimer
UnregisterClassA
SetFocus
GetCursorPos
MonitorFromWindow
PostQuitMessage
EnumWindows
GetClassNameW
LoadMenuW
SetTimer
GetMonitorInfoW
DestroyCursor
InvalidateRect
DefWindowProcW
PostMessageW
SetForegroundWindow
IsWindowEnabled
wsprintfW
GetForegroundWindow
CharUpperW
GetDesktopWindow
DrawTextW
TranslateMessage
PtInRect
GetWindowThreadProcessId
IsWindow
GetFocus
GetWindowRect
LoadCursorW
GetClientRect
MonitorFromPoint
GetWindowDC
LoadAcceleratorsW
DestroyWindow
LoadImageW
RegisterClassExW

gdi32

SetBitmapBits
SaveDC
CreateDIBSection
DeleteDC
RestoreDC
CreateCompatibleBitmap
SetTextColor
CreateFontW
SetBkMode
GetBitmapBits
DeleteObject
SelectObject
CreateCompatibleDC

advapi32

OpenServiceW
RegDeleteKeyW
RegOpenKeyW
SetEntriesInAclW
ControlService
CloseServiceHandle
GetNamedSecurityInfoW
RegEnumKeyExW
FreeSid
OpenProcessToken
LookupPrivilegeValueW
DuplicateTokenEx
AllocateAndInitializeSid
QueryServiceStatus
AdjustTokenPrivileges
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
RevertToSelf
DeleteService
RegCloseKey
RegQueryInfoKeyW
OpenSCManagerW
RegSetValueExW
RegOpenKeyExW
SetTokenInformation
CreateServiceW
StartServiceW
CreateProcessAsUserW
SetNamedSecurityInfoW
RegEnumValueW

shell32

SHGetMalloc
SHFileOperationW
SHGetSpecialFolderPathW

ole32

CoCreateInstance
CoTaskMemFree
CoCreateGuid
CoInitializeSecurity
CoTaskMemAlloc
CoTaskMemRealloc
CoSetProxyBlanket
CoInitialize
CoUninitialize

oleaut32

VariantChangeType
SysFreeString
VariantClear
GetErrorInfo
SysStringLen
SysAllocString
CreateErrorInfo
VarUI4FromStr
SetErrorInfo
VariantInit
SysAllocStringByteLen

winhttp

WinHttpQueryHeaders
WinHttpReadData
WinHttpOpen
WinHttpSetOption
WinHttpCloseHandle
WinHttpSendRequest
WinHttpOpenRequest
WinHttpReceiveResponse
WinHttpConnect

comctl32

InitCommonControlsEx

shlwapi

PathStripPathW
PathAppendW
PathIsDirectoryW
PathFindFileNameW
PathGetDriveNumberW
StrStrIW
PathRemoveFileSpecW
PathRemoveExtensionW
SHDeleteKeyW
PathFindExtensionW
PathFileExistsW

msimg32

GradientFill
AlphaBlend

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

iphlpapi

GetIpForwardTable

oledlg

ord8
OleUIBusyW

wtsapi32

WTSEnumerateSessionsW
WTSFreeMemory

psapi

GetModuleFileNameExW
GetProcessMemoryInfo
QueryWorkingSet
GetModuleInformation

msvcrt

_exit
__set_app_type
_CIsin
_except_handler3

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

196dc0fa200ed8a1f2122be49fa80c3c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

winhttp

comctl32

shlwapi

msimg32

version

iphlpapi

oledlg

wtsapi32

psapi

msvcrt

userenv

Sections

.text Size: 61KB - Virtual size: 61KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 17KB - Virtual size: 20KB

.rsrc Size: 36KB - Virtual size: 35KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 61KB - Virtual size: 61KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 17KB - Virtual size: 20KB

.rsrc
Size: 36KB - Virtual size: 35KB

.reloc
Size: 8KB - Virtual size: 8KB