VirusShare_19536f5a190df20b8d8b94b6c58aab88

Sharing

Copy URL Twitter E-mail

General

Target
VirusShare_19536f5a190df20b8d8b94b6c58aab88
Size 329KB
Sample240610-msa1ragf93
SHA256 63a6658162b60cb7d2ba971b9c4efd6b54e7845592023e240310e8ca141f4924
MD5 19536f5a190df20b8d8b94b6c58aab88
SHA1 bc54b52e37168a1442002030d48c489b7347fb89
SHA512 4f27c06cfd5e2ec75050bdb57e279ece02a485450e481ed82f4eece456c2e4144ceae93b5a87bd94e8b82e1458629d5df4575aa45b3aae778044ced18a518c64
SSDEEP 6144:FKzdgl/ZWKOtAObo7zoooocIuFp1rgvW+TrGlbiRenD+uwELn6eVJTOF:ugnWvtFoQvmvW8KlshVAG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_19536f5a190df20b8d8b94b6c58aab88

File Explorer

VirusShare_19536f5a190df20b8d8b94b6c58aab88

.exe 329KB

VirusShare_19536f5a190df20b8d8b94b6c58aab88

IMPHASH 64a574328faca3de90597572f0eb40b6
SHA256 63a6658162b60cb7d2ba971b9c4efd6b54e7845592023e240310e8ca141f4924
MD5 19536f5a190df20b8d8b94b6c58aab88
SHA1 bc54b52e37168a1442002030d48c489b7347fb89
SHA512 4f27c06cfd5e2ec75050bdb57e279ece02a485450e481ed82f4eece456c2e4144ceae93b5a87bd94e8b82e1458629d5df4575aa45b3aae778044ced18a518c64
SSDEEP 6144:FKzdgl/ZWKOtAObo7zoooocIuFp1rgvW+TrGlbiRenD+uwELn6eVJTOF:ugnWvtFoQvmvW8KlshVAG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

44306

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

RealChildWindowFromPoint SendMessageW GetMouseMovePointsEx ToAsciiEx VkKeyScanExA SetScrollPos GetFocus GetDC GetWindowTextA CloseWindow GetScrollPos AppendMenuA GetGUIThreadInfo GetScrollBarInfo IsCharLowerA ReleaseCapture

ole32

CoDisconnectObject OleDestroyMenuDescriptor

advapi32

RegDeleteValueW

gdi32

DeleteMetaFile GetAspectRatioFilterEx EndPage Arc SetColorSpace ColorMatchToTarget GetDCOrgEx CreateHatchBrush CreateCompatibleDC StartDocW SetROP2 GetBrushOrgEx GetGlyphOutlineW GetMapMode GetCharABCWidthsA SetViewportExtEx GetCharWidth32W ResetDCW FrameRgn SetBkMode GetTextMetricsW GetLayout GetRgnBox MaskBlt GetTextColor EnumICMProfilesA

netapi32

NetWkstaTransportAdd

winspool.drv

DocumentPropertiesW

kernel32

GetOEMCP IsValidCodePage LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW HeapSize VirtualProtect GetCPInfo InitializeCriticalSectionAndSpinCount IsDebuggerPresent UnhandledExceptionFilter OpenProcess CreateMemoryResourceNotification DefineDosDeviceW SetPriorityClass SetProcessPriorityBoost EncodeSystemPointer LockFile MapUserPhysicalPagesScatter GetCurrentProcess GetEnvironmentStrings CreateDirectoryA CreateProcessA DeleteFileA FindResourceA FormatMessageA GetACP GetEnvironmentVariableA GetExitCodeProcess GetFileAttributesA GetFullPathNameA GetLocaleInfoA GetModuleFileNameA GetProcAddress GetSystemDefaultLCID GetSystemInfo GetUserDefaultLangID GetVersionExA GetWindowsDirectoryA IsDBCSLeadByte LoadLibraryA LoadResource LockResource RemoveDirectoryA SetErrorMode SetLastError SizeofResource Sleep VirtualQuery CloseHandle CreateFileA ExitProcess GetFileType GetSystemTime GetFileSize GetStdHandle RaiseException ReadFile RtlUnwind SetEndOfFile SetFilePointer WriteFile GetCommandLineA GetLastError GetModuleHandleA MultiByteToWideChar TlsGetValue TlsSetValue WideCharToMultiByte LocalAlloc LocalFree VirtualAlloc VirtualFree InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection CreateSemaphoreW lstrcmpW lstrcmpiA GetSystemDirectoryW DebugActiveProcessStop SetThreadContext FindClose HeapCreate GlobalMemoryStatus GetVolumeInformationA FindFirstFileW CreateProcessW GetTimeFormatA HeapReAlloc HeapAlloc GetStartupInfoA HeapFree SetUnhandledExceptionFilter GetModuleHandleW FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess

Sharing

General

Malware Config

Signatures

File Explorer

VirusShare_19536f5a190df20b8d8b94b6c58aab88

user32

ole32

advapi32

gdi32

netapi32

winspool.drv

kernel32

generic