VirusShare_1aada745a3e3c67ae79b2fda929dcf50

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_1aada745a3e3c67ae79b2fda929dcf50
Size

254KB
MD5

1aada745a3e3c67ae79b2fda929dcf50
SHA1

e1f32a586e0ef6d80726f3f54192dc91e53f8084
SHA256

5e190ff8dfb8d58695843a2a847266bfdd00fbed7fd88420165a79f19d2516e1
SHA512

e5572abe707c86928fa06b8fcd98b97a843980712446d1c6f3ecdda819bf6e7e14e633235bef6ea70fecaf96b5dd8141c6f7bb927a393f476d575365fbcc941a
SSDEEP

1536:IL1SYs7aNPkGuwMxhS/VrQ0E2iKrRJP5b3YPGJ471CO59bEGXhHr6pu:IsYs2N8WMx4/phRJhAF7VLFt6Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_1aada745a3e3c67ae79b2fda929dcf50

Files

VirusShare_1aada745a3e3c67ae79b2fda929dcf50
.dll windows:5 windows x86 arch:x86

7b9ec322c4bf605b514b417a813b2e69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
DeleteFileW
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetFileAttributesW
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
CreateFileW
LocalFree
MultiByteToWideChar
OpenProcess
QueryPerformanceCounter
ReadFile
ReleaseSemaphore
SetErrorMode
SetEvent
SetFilePointer
TerminateProcess
UnhandledExceptionFilter
WideCharToMultiByte
WriteFile
VirtualAlloc
LoadLibraryA
CreateDirectoryW

user32

LoadIconW
LoadCursorA
LoadIconA

advapi32

RegOpenKeyExA

msvcrt

_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
exit
free
malloc
sprintf

Sections

.rdata6
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata5
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata4
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b9ec322c4bf605b514b417a813b2e69

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Sections

.rdata6 Size: 33KB - Virtual size: 32KB

.rdata5 Size: 1KB - Virtual size: 1KB

.rdata4 Size: 65KB - Virtual size: 65KB

.rdata3 Size: 1024B - Virtual size: 1000B

.text3 Size: 512B - Virtual size: 100B

.text2 Size: 512B - Virtual size: 100B

.text Size: 13KB - Virtual size: 12KB

.data Size: 129KB - Virtual size: 129KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 1KB - Virtual size: 1KB

.rdata6
Size: 33KB - Virtual size: 32KB

.rdata5
Size: 1KB - Virtual size: 1KB

.rdata4
Size: 65KB - Virtual size: 65KB

.rdata3
Size: 1024B - Virtual size: 1000B

.text3
Size: 512B - Virtual size: 100B

.text2
Size: 512B - Virtual size: 100B

.text
Size: 13KB - Virtual size: 12KB

.data
Size: 129KB - Virtual size: 129KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 1KB - Virtual size: 1KB