VirusShare_1a79776438c3de4752b4040167b3bee0

General

Target

VirusShare_1a79776438c3de4752b4040167b3bee0
Size

236KB
MD5

1a79776438c3de4752b4040167b3bee0
SHA1

af86cc377db14c7e57dc6052bce72ace3556ed19
SHA256

122ebd303f2545e28028e7f5563ebec4c53d830effd5c0244677624388c6a0d4
SHA512

06e26599c019f2f4a09a5dcceba52e6db82132ec46e515603c5cee86fe930e3e70ec7babb84cd48a797d333f9a43cd0be55c84f92fd411f812bc6c4b45f3243d
SSDEEP

3072:03o5WXkLpKHbWOXXYI393f+ikDqkJah6p8WM1R3IyH:gCEyOXXYe3f+Aqi6p8z3l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_1a79776438c3de4752b4040167b3bee0

Files

VirusShare_1a79776438c3de4752b4040167b3bee0
.dll windows:4 windows x86 arch:x86

232b35eba06ed321b31a7fc4b860c517

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
ReplaceFileW
DeleteFileA
MapUserPhysicalPagesScatter
GetConsoleWindow
GetModuleFileNameW
MultiByteToWideChar
SetConsoleCtrlHandler
HeapAlloc
CreateFileA
EnumSystemLanguageGroupsW
GetTempPathW
SetEnvironmentVariableA
LCMapStringW
ScrollConsoleScreenBufferW
VirtualFree
VirtualAlloc
lstrcpynA
SetVolumeLabelA
WriteConsoleOutputCharacterW
DisableThreadLibraryCalls
TlsAlloc
FindCloseChangeNotification
CreateFileMappingA
GetProfileIntA
FindVolumeMountPointClose
ExpandEnvironmentStringsW
GetLargestConsoleWindowSize
GetShortPathNameW
WriteTapemark
ReplaceFileA
GetModuleFileNameA
ClearCommError
GlobalFlags
SwitchToThread
SetComputerNameA
CopyFileExA
GetNumberOfConsoleMouseButtons
FindFirstChangeNotificationW
SetLocaleInfoW
SignalObjectAndWait
UnlockFileEx
GetThreadTimes
UnregisterWait
GetCalendarInfoW
GetConsoleTitleW
GetCurrentProcess
GetLocaleInfoW

msvcrt

strlen
memcpy

Exports

Exports

PseudocodeEncodingClass
PseudocodeKeyboard
PseudocodeProgramming
PseudocodeVersionFinder
PseudocodeWidgetSubdirectory

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

232b35eba06ed321b31a7fc4b860c517

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 18KB

.data Size: 4KB - Virtual size: 7KB

.edata Size: 80KB - Virtual size: 79KB

.rsrc Size: 124KB - Virtual size: 124KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 20KB - Virtual size: 18KB

.data
Size: 4KB - Virtual size: 7KB

.edata
Size: 80KB - Virtual size: 79KB

.rsrc
Size: 124KB - Virtual size: 124KB

.reloc
Size: 4KB - Virtual size: 4KB