VirusShare_1bc2a0dd8913a040fdd27cffa5b9571d | Triage

Sharing

General

Target

VirusShare_1bc2a0dd8913a040fdd27cffa5b9571d
Size

16KB
MD5

1bc2a0dd8913a040fdd27cffa5b9571d
SHA1

5a614a2f14407557116512c7f42f1a3eb7bd447e
SHA256

c6bbdb77c4a03986d4db11b537e4c6be8484a1fe8609e1ec36433c10f4da5dee
SHA512

fe10d5a0ab87d341f99363776d4e4a4946cfe13325556528dfa0c2d5b29439aa29735a032b3cbcd9eb6ca18e129605d3418c748360d9ff78f3333eb752273189
SSDEEP

384:VX6rpgU3CyYP/1mf3u2gEOgd8JCaHsauKTH:sr6U0P/8BgEOg+JCaMaFH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_1bc2a0dd8913a040fdd27cffa5b9571d

Files

VirusShare_1bc2a0dd8913a040fdd27cffa5b9571d
.dll windows:4 windows x86 arch:x86

5eddc451a8fd7e00eb4731d356a3225e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterWindowMessageW
DefWindowProcA
IsWindow
RegisterClassA
CharLowerW
DestroyWindow
UnregisterClassA
CharNextW
SetWindowPos
GetWindowLongW
PostMessageA
SetWindowLongW
MoveWindow
LoadStringA

advapi32

InitializeSecurityDescriptor
IsValidSecurityDescriptor
GetFileSecurityA
InitializeAcl
RegEnumKeyExW
GetTokenInformation
GetSecurityDescriptorDacl
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
SetSecurityDescriptorDacl
GetAclInformation
RegCloseKey
GetLengthSid
AddAccessAllowedAce
RegEnumValueW
OpenProcessToken
GetAce
RegDeleteKeyW
CopySid

Exports

Exports

eQuTZiYyu

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 421KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ