VirusShare_0d020d09acd437b8e1c20dca59c0f3a6 | Triage

Sharing

General

Target

VirusShare_0d020d09acd437b8e1c20dca59c0f3a6
Size

2.7MB
MD5

0d020d09acd437b8e1c20dca59c0f3a6
SHA1

16474c3ddcd6952e264ae1a6c7289593a173a3fb
SHA256

5d9cd41307ef1bca484ac14ea8849f93f735ff5d04de40ef3f753d704abbb24b
SHA512

91a715168414dca2b187148004f1b7ceea4d0d65ae4b5d130d03d9c470fe971f2da62abc25818d1530f52019694cf550bb1cd89a31a72d34640bffa438bfb904
SSDEEP

3072:axOUTXIspizAnu4OROGvwB16YYPEzTJu1LqB+:axOUTXIsbHGvwBwZczuLi+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_0d020d09acd437b8e1c20dca59c0f3a6

Files

VirusShare_0d020d09acd437b8e1c20dca59c0f3a6
.dll regsvr32 windows:4 windows x86 arch:x86

14f99a8de01bc5047548e0cf86fe972a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
SizeofResource
SetWaitableTimer
SetThreadLocale
SetUnhandledExceptionFilter
ResumeThread
SetCurrentDirectoryW
ReadProcessMemory
SetCommMask
SetNamedPipeHandleState
_lread
ClearCommError

user32

SetScrollPos

advapi32

RegGetKeySecurity

gdi32

SaveDC
SetPixel
StrokeAndFillPath
CloseFigure
CreateCompatibleBitmap
CombineRgn
PtVisible

msvcrt

__p__acmdln
_adj_fdivr_m32
_execlpe
_mbbtombc
_i64toa

crypt32

PFXExportCertStore

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ