VirusShare_46b9fc70dc137c0d978ce16364a15c27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_46b9fc70dc137c0d978ce16364a15c27
Size

2.0MB
MD5

46b9fc70dc137c0d978ce16364a15c27
SHA1

b6ad2a69250d7987fae98801327b1f7e7d853b8b
SHA256

f8f610fa8d6d3e1c27372cc07e1881f583f75e2b49a2b0b7c29631caf0d5a4bd
SHA512

fee57126c76862b325a64c4cf3617e6bb41aa66232dfe9e8932e9b0b8e06ce363bfbe510b8971bdcaf102b0e61320da876d15758a64c83864102db55c13f12be
SSDEEP

49152:16PiDFUWHNPEZ838Q5i/zFjYDCVFg2/3337YBb:aiDFUWH5nF5ciDCVFg2zq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_46b9fc70dc137c0d978ce16364a15c27

Files

VirusShare_46b9fc70dc137c0d978ce16364a15c27
.exe windows:4 windows x86 arch:x86

ea1ee9cb137bfd15c857b570393ea006

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

memset

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetModuleFileNameA
HeapAlloc
HeapFree
HeapReAlloc

msvcrt

memcpy
fclose
free
calloc
_errno
malloc
realloc
fread
ftell
fseek
floor
_ftol
memmove
toupper
sprintf
fopen
perror
fprintf
ceil
qsort
ldexp
_CIpow
exit
frexp
_CIacos
memchr

Sections

.code
Size: 512B - Virtual size: 450B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

pata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

sata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ