VirusShare_0bdaf73f53ac9f9ce2d1ab09386b9a08 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_0bdaf73f53ac9f9ce2d1ab09386b9a08
Size

96KB
MD5

0bdaf73f53ac9f9ce2d1ab09386b9a08
SHA1

0b8c560a40de97c5c0c262345d477e0a2527c2ca
SHA256

799946687be457b9544b7806fde3ba84dc279b95f4897cfca0f06130860f5c06
SHA512

420c44ab229c63a1098dc03892e8c6a1072b24a50f72adb372e53024a8c0c12d020a62eb80853c661a72d1013377b254ddfe3db88bea4a2c7d26e8832d3a4cc9
SSDEEP

1536:N7SjL+NXoXK3JTK+emX9f4msQfcUxUcdyN312ZryMbJCNQt9YoZEEfDk79nUV:N7A4K+/kQfcUGcISdXME9YuEWDapU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_0bdaf73f53ac9f9ce2d1ab09386b9a08

Files

VirusShare_0bdaf73f53ac9f9ce2d1ab09386b9a08
.dll windows:4 windows x86 arch:x86

3dfdd931a8545449bdf07857fdc9c5c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
InterlockedDecrement
VirtualAlloc
lstrlenA
GetCurrentProcess
QueryPerformanceCounter
GlobalLock
InterlockedIncrement
HeapDestroy
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcpyA
EnterCriticalSection
lstrcpyW
FindResourceA
GlobalUnlock
GetLastError
GetProcAddress
LeaveCriticalSection

gdi32

CreateMetaFileA
DeleteMetaFile
SaveDC
SetWindowOrgEx
CreateRectRgnIndirect
SetWindowExtEx
RestoreDC

msvcrt

strcmp
memcmp

Exports

Exports

Kfjshflsj3

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ