VirusShare_1b2d9560eabd29f31b1fd0f34376b998 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_1b2d9560eabd29f31b1fd0f34376b998
Size

3.0MB
MD5

1b2d9560eabd29f31b1fd0f34376b998
SHA1

30309d6ee6acfcbf7be154410fb54c630433f26f
SHA256

ba95f95906551bd6931e14ec99af2cb31c87964d7fd0c1416658c1099b945c45
SHA512

06d0ae20bc8f8a74584c84b133cfcaf7b5fc22ce4f3a38e7498b3aae986c4c5c96d84b5ae32b67d6ce521f2bb465b6f0727f534ae025b3962a703379d5ec8599
SSDEEP

3072:WkXOL22q7bBMMqbETgtKs3JwVEnOMBDDc6kOk:ZXOL2Z7tqYTSKoJwVEOMBDwh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_1b2d9560eabd29f31b1fd0f34376b998

Files

VirusShare_1b2d9560eabd29f31b1fd0f34376b998
.dll windows:4 windows x86 arch:x86

123ec27e51dd1955840da9a4c8e223aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
SetSystemTime
SetFirmwareEnvironmentVariableW
SetDefaultCommConfigA
GetPriorityClass
PeekConsoleInputA

ntdll

RtlGetNtGlobalFlags
RtlEmptyAtomTable
RtlFreeAnsiString
RtlCheckRegistryKey
RtlRaiseStatus

user32

ValidateRgn
GrayStringA
GetWindowRgn

gdi32

CreateDIBPatternBrushPt
CombineRgn
FillPath
GetDCBrushColor
PaintRgn
Pie
RoundRect
SetDCBrushColor
SetLayout
GdiTransparentBlt
CreateRoundRectRgn

shell32

Shell_NotifyIconW

dnsapi

DnsIsStringCountValidForTextType

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 978B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1018B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ