VirusShare_1c020d27d25a7d9b76ff727328b9cc08

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_1c020d27d25a7d9b76ff727328b9cc08
Size

380KB
MD5

1c020d27d25a7d9b76ff727328b9cc08
SHA1

fbca0a7bc3fa0e9bccedf3f625ad79e4b8aad01a
SHA256

d40745f4cf559398af678770b2e0f80ff786d27208add9676cbeba048fbd5aa1
SHA512

b8c91ff18b8dd81d6c4e545314cb0dbca765e7cda9283245a9e1ea5f766f634912c5588543e480f9b3215b9834be6186eb036a5eda77fb4e7a3b0b14d0213bfd
SSDEEP

6144:8ezHRXkTNPApxIq+SR+M2+pFZcjP0pUP2YXrg9YklJQNxVjuib16BXqkk4xuYYj9:8ORXYYpxIq+SwM2+pFZcjP0p8kPlqvdN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_1c020d27d25a7d9b76ff727328b9cc08

Files

VirusShare_1c020d27d25a7d9b76ff727328b9cc08
.exe windows:4 windows x86 arch:x86

e97c45596272db12405e096b56dc4cc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

SetKernelObjectSecurity
FreeSid
RegisterServiceCtrlHandlerA
ChangeServiceConfig2A
SetFileSecurityA
RegOpenKeyExW
QueryServiceStatus
DecryptFileW
RegConnectRegistryA
RegUnLoadKeyW
StartServiceA
OpenSCManagerA
SetSecurityDescriptorGroup
CreateProcessAsUserA
EncryptFileW
GetUserNameA
RegSetValueW
ReportEventW
QueryServiceLockStatusA
RegCreateKeyW
OpenServiceA
RegNotifyChangeKeyValue
ChangeServiceConfig2W
LockServiceDatabase
OpenThreadToken
RegEnumKeyW
CreateProcessAsUserW
ChangeServiceConfigA
SetEntriesInAclW
CloseServiceHandle
RegisterEventSourceA
StartServiceCtrlDispatcherW
GetSidLengthRequired
ReadEventLogW
RegCreateKeyA
RegCreateKeyExA
SetEntriesInAclA
RegReplaceKeyA
StartServiceCtrlDispatcherA
OpenEventLogW
LsaAddAccountRights
LsaOpenPolicy
ReportEventA
AdjustTokenPrivileges
RegCreateKeyExW
RegFlushKey
OpenProcessToken
RevertToSelf
SetNamedSecurityInfoW
EnumServicesStatusA
QueryServiceLockStatusW
LookupPrivilegeValueA
LsaFreeMemory
GetSidIdentifierAuthority
RegDeleteKeyA
SetThreadToken
RegLoadKeyA
QueryServiceConfigA
ChangeServiceConfigW
GetEffectiveRightsFromAclW
GetSidSubAuthorityCount
LookupAccountNameW
RegQueryValueA
RegOpenKeyExA
RegQueryInfoKeyA
SetSecurityDescriptorSacl
RegQueryInfoKeyW
DeleteService
CopySid
LsaQueryInformationPolicy
GetKernelObjectSecurity
LogonUserA
RegEnumKeyExA
RegSetValueExW
LsaRetrievePrivateData
SetFileSecurityW
InitializeSecurityDescriptor
RegSetValueA
ImpersonateSelf
CreateServiceW
RegisterServiceCtrlHandlerW
ControlService
InitializeSid
AddAce
RegDeleteValueW
GetAclInformation
AllocateAndInitializeSid

user32

DrawFrameControl
ShowWindow
CreateWindowExW
DrawTextA
GetMessageA
UnpackDDElParam
SetWindowLongW
GetClassNameA
LoadKeyboardLayoutW
FindWindowA
GetMessagePos
DestroyCursor
SetWindowPlacement
SetPropA
SetScrollPos
BeginDeferWindowPos
CallWindowProcA
DdeAccessData
GetParent
GetCaretPos
GetKeyboardState
GetGUIThreadInfo
LoadStringW
FrameRect
DrawStateW
CreatePopupMenu
LoadIconA
LoadCursorA
GetClipCursor
GetDoubleClickTime
IsIconic
InsertMenuW
GetWindowWord
GetDlgItemTextW
EmptyClipboard
TranslateAcceleratorA
DrawAnimatedRects
SendDlgItemMessageA
OffsetRect
InsertMenuA
LoadBitmapW
GetClassInfoW
WaitMessage
CreateCursor
IsCharUpperA
GetFocus
EnumThreadWindows
GetDlgItem
FindWindowW
PaintDesktop
SetKeyboardState
CheckRadioButton
GetKeyState
GetWindowLongA
MessageBeep
LoadImageA
RegisterWindowMessageA
CloseDesktop
SetCursor
CharLowerW
SetWindowLongA
GetScrollPos
RegisterClassExW
GetWindowLongW
VkKeyScanExW
DispatchMessageA
ShowOwnedPopups
CharLowerA
GetTabbedTextExtentA
AppendMenuW
CharPrevW
CharToOemA
ValidateRect
GetCapture
ClipCursor
TranslateMDISysAccel
SetWindowRgn
DispatchMessageW
IsWindowEnabled
KillTimer
PtInRect
AdjustWindowRect
SetRectEmpty
IsZoomed
DestroyMenu
GetClipboardViewer
GetWindowThreadProcessId
ReleaseDC
GetClipboardData
SetActiveWindow
SetTimer
DialogBoxParamA
DialogBoxIndirectParamA
GetKeyboardLayoutList
DestroyCaret
AttachThreadInput
IsWindow
ScrollWindowEx
MapVirtualKeyW
ScreenToClient
BringWindowToTop
ChangeClipboardChain
GetWindowTextLengthA
CharNextW
VkKeyScanW
OemToCharBuffA
GetUserObjectInformationW
MessageBoxA
SetWindowPos
GetSysColor
CreateDialogIndirectParamA
CloseClipboard
DrawTextW
SetClipboardData
InvalidateRect
DdeFreeStringHandle
GetClassLongA
LoadMenuW
RemovePropA
MoveWindow
GetWindowTextA
DdeQueryStringA
GetSysColorBrush
IsCharLowerA
GetNextDlgTabItem
SetCaretPos
GetClassNameW
SystemParametersInfoA
keybd_event
GetCursorPos
GetMenuItemCount
IsDlgButtonChecked
CharNextA
SetForegroundWindow
MapDialogRect
GetWindowModuleFileNameA
GetMessageExtraInfo
PostThreadMessageW
LockWindowUpdate
CharUpperBuffW
WinHelpW
GetDlgItemInt
IsDialogMessageA
GetDlgItemTextA
GetLastActivePopup
EnableWindow
CharUpperW
GetMenuItemID
GetSystemMetrics
DefWindowProcA
SetCapture
CopyAcceleratorTableW
ReuseDDElParam
GetPropA
MessageBoxExW
LoadBitmapA
DrawIcon
GetMenuState
SetCaretBlinkTime
ChildWindowFromPointEx
GetClassInfoA
GetClassInfoExW
CharLowerBuffA
ScrollWindow
IsClipboardFormatAvailable
GetDlgCtrlID
GetDC
IsCharAlphaNumericA
GetClipboardFormatNameW
PostQuitMessage
SetClassLongA
FillRect
BeginPaint
GetOpenClipboardWindow
SetFocus
CreateWindowStationW
GetWindow
SendInput
UnionRect
IsCharAlphaW
DrawTextExA
DestroyAcceleratorTable
SetMenuDefaultItem
ShowCaret
FindWindowExA
DragDetect
RegisterClipboardFormatA
SetDlgItemTextW
UnhookWinEvent
GetMenu
DdeConnect
SetClassLongW
IntersectRect
CloseWindow
UnhookWindowsHook
CharUpperA
DialogBoxIndirectParamW
IsWindowVisible
TrackPopupMenuEx
EnumDisplaySettingsW
EnableScrollBar
SetRect
SetMenu
IsChild
MapVirtualKeyExW
CreateMenu
WinHelpA
ShowScrollBar
TranslateMessage
VkKeyScanExA
TrackPopupMenu
WindowFromPoint
GetProcessWindowStation
ClientToScreen
DefDlgProcA
ToAscii
LoadMenuA
CopyIcon
CreateDialogParamA
DeferWindowPos
LoadCursorFromFileA
BlockInput
DdeClientTransaction
CharPrevA
SetDlgItemInt
RegisterClipboardFormatW
DefDlgProcW
FindWindowExW
GetKeyboardLayoutNameW
CreateDialogIndirectParamW
PostMessageW
ChangeDisplaySettingsA
SetWindowTextA

gdi32

ExtEscape
SetWindowOrgEx
GetObjectW
GetWorldTransform
SetPolyFillMode
GetWindowOrgEx
GdiFlush
GetCharWidthA
IntersectClipRect
StartPage
CreateMetaFileA
EqualRgn
GetDIBColorTable
CreateFontIndirectW
GetEnhMetaFileHeader
SetPixelFormat
CreateCompatibleDC
ScaleWindowExtEx
UpdateColors
Polyline
SetTextColor
GetTextExtentPoint32A
RealizePalette
OffsetWindowOrgEx
ExtSelectClipRgn
GetBkColor
BeginPath
GetCharABCWidthsW
GetObjectA
GetTextFaceA
EnumFontFamiliesExW
GetClipRgn
GetTextAlign
SetMetaFileBitsEx
GetClipBox
GetTextExtentPointA
SetROP2
CreateICW
CreateCompatibleBitmap
GetObjectType
Arc
GetTextExtentPoint32W
SetWinMetaFileBits
GetTextMetricsA
GetBrushOrgEx
OffsetViewportOrgEx
TextOutA
EnumFontsA
GetMapMode
StrokePath
DPtoLP
CancelDC
CreateSolidBrush
SetPixelV
GetNearestPaletteIndex
SetAbortProc

imagehlp

UpdateDebugInfoFileEx
ImageGetCertificateHeader
ImageGetDigestStream
ImageGetCertificateData
ImageUnload
ImageEnumerateCertificates
MapFileAndCheckSumA

msvcrt

_setmbcp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
abs
vprintf
abort
_onexit
__dllonexit
_winver
_controlfp

kernel32

GetModuleHandleA
GetStartupInfoA
EnumDateFormatsW

mfc42

ord815
ord6375
ord4486
ord2554
ord1060
ord5731
ord3922
ord1089
ord1030
ord2396
ord3346
ord1029
ord5302
ord2725
ord1024
ord4698
ord5307
ord1042
ord5714
ord3953
ord2982
ord1090
ord3259
ord4465
ord1077
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord1017
ord4424
ord3738
ord561
ord1576
ord3401
ord1168

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 663KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 260KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e97c45596272db12405e096b56dc4cc0

Headers

File Characteristics

Imports

advapi32

user32

gdi32

imagehlp

msvcrt

kernel32

mfc42

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 663KB

.rsrc Size: 260KB - Virtual size: 257KB

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 663KB

.rsrc
Size: 260KB - Virtual size: 257KB