VirusShare_7b43d335d44b6ca81f6bbf216516691f

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_7b43d335d44b6ca81f6bbf216516691f
Size

164KB
MD5

7b43d335d44b6ca81f6bbf216516691f
SHA1

62b6256e1bc06ab91bc9fbbff34d14c49e54d33a
SHA256

06b7890ec2448fdc77e948323c6dee9cadb09c556e465358c0875adf2c452786
SHA512

4c29e33dee235792bbdc6a70648ad545bfddc37a630866060b7710aaee68364a7a6e9442df1a6a6e19719a2cbcbfc7887da868ce33ed338e37d10598d4e9f72d
SSDEEP

3072:DDm+dx1TwfcPbye7zgQi6wgKUlAixbDKbAuw8vE0u:h/TwfcPbyizgQiLAK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_7b43d335d44b6ca81f6bbf216516691f

Files

VirusShare_7b43d335d44b6ca81f6bbf216516691f
.exe windows:5 windows x86 arch:x86

8fd22335623651a6ea14241d2815be44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
VirtualFree
GetPrivateProfileIntW
DeviceIoControl
GetCommandLineW
IsValidLocale
FindFirstFileW
HeapCreate
WriteFile
InitializeCriticalSectionAndSpinCount
GetFileAttributesW
GetPrivateProfileSectionW
UnhandledExceptionFilter
GetDiskFreeSpaceExW
SetEvent
GetLastError
GetTimeFormatA
GetModuleFileNameA
ExitProcess
HeapReAlloc
WriteConsoleW
WaitForSingleObject
GetDateFormatA
VirtualQueryEx
InterlockedCompareExchange
CreateMutexW
VirtualAlloc
GetTickCount
GlobalMemoryStatus
CreateProcessW
LoadLibraryA
LeaveCriticalSection
GetProcAddress
GetUserDefaultLCID
GetFileSizeEx
GetStartupInfoW
HeapDestroy
IsValidCodePage
TerminateProcess
GetConsoleOutputCP
CloseHandle
GetTimeZoneInformation
ProcessIdToSessionId
CreateEventW
lstrlenA
RaiseException
TlsAlloc
InterlockedIncrement
FatalAppExitA
TlsGetValue
LockResource
TlsSetValue
GetStringTypeA
RtlUnwind
InterlockedDecrement
WriteConsoleA
FindNextFileW
MapViewOfFile
GetLocaleInfoW
LCMapStringW
ExitThread
SystemTimeToFileTime
CreateFileW
LoadLibraryW
MoveFileExW
FindResourceExW
CreateDirectoryW
GetCurrentThreadId
Module32FirstW
FreeLibrary
InitializeCriticalSection
GetLocaleInfoA
QueryPerformanceCounter
lstrcmpiW
EnumSystemLocalesA
SetHandleCount
OpenFileMappingW
GetCurrentThread
Sleep
DeleteFileW
SetEnvironmentVariableA
LocalFree
LCMapStringA
InterlockedExchange
GetStringTypeW
IsDebuggerPresent
Process32NextW
GetStdHandle
CreateFileMappingW
GetFileSize
UnmapViewOfFile
GetConsoleMode
GetProcessHeap
HeapAlloc
GetConsoleCP
GetModuleHandleA
SetUnhandledExceptionFilter
DeleteCriticalSection
ExpandEnvironmentStringsW
GetACP
GlobalAddAtomA
CancelWaitableTimer
OutputDebugStringW
VirtualProtectEx
OpenWaitableTimerA
AddAtomA
GlobalFindAtomW
CancelIo
GetVersion
AreFileApisANSI
HeapSize
OpenThread
GetFileType
ReadProcessMemory
CompareStringA
GetLogicalDrives
lstrlenW
CompareStringW
Module32NextW
SetEndOfFile
WideCharToMultiByte
FindResourceW
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
SizeofResource
GetOEMCP
OpenProcess
EnterCriticalSection
SetStdHandle
GetModuleFileNameW
GetVersionExW
ReadFile
LoadResource
FreeEnvironmentStringsW
WritePrivateProfileStringW
Process32FirstW
SetLastError
GetStartupInfoA
GetCurrentProcessId
GetTempPathW
RemoveDirectoryW
CreateToolhelp32Snapshot
GetCPInfo
TlsFree
CreateThread
SetFilePointer
FlushInstructionCache
GetTempFileNameW
GetDriveTypeW
GetLocalTime
LoadLibraryExW
HeapFree
IsProcessorFeaturePresent
FlushFileBuffers
SetConsoleCtrlHandler
GetModuleHandleW
GetVolumeInformationW
GetCurrentProcess
CreateFileA
MultiByteToWideChar
GetEnvironmentStringsW

user32

GetWindowLongW
GetParent
SetWindowTextW
PeekMessageW
DestroyMenu
GetMessageW
GetMenuItemInfoW
CreatePopupMenu
LoadStringA
TrackPopupMenuEx
SendMessageW
SetCursor
GetClassInfoExW
RemoveMenu
SetWindowLongW
GetWindowTextW
DispatchMessageW
ShowWindow
LoadStringW
TrackMouseEvent
MapWindowPoints
EnumChildWindows
MessageBeep
UpdateLayeredWindow
ReleaseDC
ScreenToClient
TranslateAcceleratorW
CharNextW
AppendMenuW
GetMenuItemCount
CallWindowProcW
SetWindowPos
GetWindow
KillTimer
UnregisterClassA
SetFocus
GetCursorPos
MonitorFromWindow
PostQuitMessage
EnumWindows
GetClassNameW
LoadMenuW
SetTimer
GetMonitorInfoW
DestroyCursor
InvalidateRect
DefWindowProcW
PostMessageW
SetForegroundWindow
IsWindowEnabled
wsprintfW
GetForegroundWindow
CharUpperW
GetDesktopWindow
DrawTextW
TranslateMessage
PtInRect
GetWindowThreadProcessId
IsWindow
GetFocus
GetWindowRect
LoadCursorW
GetClientRect
MonitorFromPoint
GetWindowDC
LoadAcceleratorsW
DestroyWindow
LoadImageW
RegisterClassExW

gdi32

SetBitmapBits
SaveDC
CreateDIBSection
DeleteDC
RestoreDC
CreateCompatibleBitmap
SetTextColor
CreateFontW
SetBkMode
GetBitmapBits
DeleteObject
SelectObject
CreateCompatibleDC

advapi32

OpenServiceW
RegDeleteKeyW
RegOpenKeyW
SetEntriesInAclW
ControlService
CloseServiceHandle
GetNamedSecurityInfoW
RegEnumKeyExW
FreeSid
OpenProcessToken
LookupPrivilegeValueW
DuplicateTokenEx
AllocateAndInitializeSid
QueryServiceStatus
AdjustTokenPrivileges
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
RevertToSelf
DeleteService
RegCloseKey
RegQueryInfoKeyW
OpenSCManagerW
RegSetValueExW
RegOpenKeyExW
SetTokenInformation
CreateServiceW
StartServiceW
CreateProcessAsUserW
SetNamedSecurityInfoW
RegEnumValueW

shell32

SHGetMalloc
SHFileOperationW
SHGetSpecialFolderPathW

ole32

CoCreateInstance
CoTaskMemFree
CoCreateGuid
CoInitializeSecurity
CoTaskMemAlloc
CoTaskMemRealloc
CoSetProxyBlanket
CoInitialize
CoUninitialize

oleaut32

VariantChangeType
SysFreeString
VariantClear
GetErrorInfo
SysStringLen
SysAllocString
CreateErrorInfo
VarUI4FromStr
SetErrorInfo
VariantInit
SysAllocStringByteLen

winhttp

WinHttpQueryHeaders
WinHttpReadData
WinHttpOpen
WinHttpSetOption
WinHttpCloseHandle
WinHttpSendRequest
WinHttpOpenRequest
WinHttpReceiveResponse
WinHttpConnect

comctl32

InitCommonControlsEx

shlwapi

PathStripPathW
PathAppendW
PathIsDirectoryW
PathFindFileNameW
PathGetDriveNumberW
StrStrIW
PathRemoveFileSpecW
PathRemoveExtensionW
SHDeleteKeyW
PathFindExtensionW
PathFileExistsW

msimg32

GradientFill
AlphaBlend

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

iphlpapi

GetIpForwardTable

oledlg

ord8
OleUIBusyW

wtsapi32

WTSEnumerateSessionsW
WTSFreeMemory

psapi

GetModuleFileNameExW
GetProcessMemoryInfo
QueryWorkingSet
GetModuleInformation

msvcrt

_exit
__set_app_type
_CIsin
_except_handler3

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8fd22335623651a6ea14241d2815be44

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

winhttp

comctl32

shlwapi

msimg32

version

iphlpapi

oledlg

wtsapi32

psapi

msvcrt

userenv

Sections

.text Size: 61KB - Virtual size: 61KB

.rdata Size: 39KB - Virtual size: 38KB

.data Size: 17KB - Virtual size: 20KB

.rsrc Size: 36KB - Virtual size: 35KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 61KB - Virtual size: 61KB

.rdata
Size: 39KB - Virtual size: 38KB

.data
Size: 17KB - Virtual size: 20KB

.rsrc
Size: 36KB - Virtual size: 35KB

.reloc
Size: 10KB - Virtual size: 9KB