VirusShare_1d930a54791d56b6c10411570b57d2cb

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_1d930a54791d56b6c10411570b57d2cb
Size

368KB
MD5

1d930a54791d56b6c10411570b57d2cb
SHA1

f5af265bf35d0e740de05d04873b200d34bed46d
SHA256

83427ffa553f49bb627045c609b5d4e505f7129616cccce9958f61c084985676
SHA512

b26f1eefb57d981dba9cac12ccfabd8440af680536e323f05b87d635fb03d89c4bffa0e6fce3ba6c43222c4755077a4de98ba6ee9defce3597e12767237f6e03
SSDEEP

6144:iBVsLLdsgLTCEUyQETKuSkPZ5PMVhewjAn6EYIW2gBsKTp0aLXWoRRBJY9HJJRws:VV3hLQET9P5UP06E+HsKl0aLNbs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_1d930a54791d56b6c10411570b57d2cb

Files

VirusShare_1d930a54791d56b6c10411570b57d2cb
.exe windows:4 windows x86 arch:x86

d2c017260c1c63f430929514d7cb701e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetBkColor
OffsetClipRgn
StartPage
PlayEnhMetaFile
SetTextAlign

imm32

ImmSetOpenStatus
ImmDestroyContext
ImmSetCompositionFontW
ImmGetDescriptionW
ImmEnumRegisterWordA
ImmNotifyIME
ImmGetProperty
ImmGetDefaultIMEWnd
ImmSetCompositionWindow
ImmCreateContext
ImmReleaseContext
ImmSetStatusWindowPos
ImmGetCompositionFontA
ImmGetIMEFileNameA
ImmSimulateHotKey
ImmRegisterWordW
ImmGetCandidateWindow
ImmSetCandidateWindow
ImmEscapeW
ImmGetCandidateListA
ImmGetContext
ImmSetCompositionStringW
ImmGetIMEFileNameW
ImmGetStatusWindowPos
ImmGetOpenStatus
ImmGetCandidateListW
ImmIsUIMessageW
ImmConfigureIMEW
ImmGetCompositionWindow
ImmAssociateContext
ImmGetCompositionStringA
ImmIsIME
ImmGetCandidateListCountW

shlwapi

PathGetCharTypeA
PathIsPrefixW
PathFindExtensionW
PathAddExtensionA
PathIsUNCA
SHRegQueryUSValueW
PathSetDlgItemPathW
StrNCatA
PathIsSameRootW
SHQueryValueExA
PathGetDriveNumberW
SHSetValueA
PathIsUNCServerShareA
PathAppendW
StrFromTimeIntervalW
PathBuildRootW
PathCanonicalizeW
PathFindExtensionA
PathIsUNCServerShareW
SHRegDeleteEmptyUSKeyW
PathUnquoteSpacesA
PathIsUNCServerW
SHQueryInfoKeyW
PathFileExistsW
StrFormatByteSizeA
StrDupA
StrCSpnA
PathFindFileNameA
PathRelativePathToW
StrPBrkA
PathFindNextComponentA
PathCompactPathW
PathCommonPrefixW
PathAddBackslashA
StrCmpW
PathCompactPathExW
StrToIntA
ChrCmpIW
PathRemoveBackslashA
SHQueryValueExW
SHGetValueA
PathIsRootW
SHDeleteEmptyKeyA
PathMatchSpecA
PathBuildRootA
PathQuoteSpacesA
PathParseIconLocationA
SHEnumKeyExA

winmm

midiOutGetDevCapsA
midiInReset
midiOutClose
mmioFlush
midiInGetDevCapsW
waveInGetPosition
midiInOpen
mixerGetLineInfoW
waveOutGetErrorTextA
mmioAscend
waveInGetID
mciGetErrorStringW
mixerGetLineControlsA
midiInGetErrorTextW
waveInStart
joyGetDevCapsA
waveOutGetNumDevs
waveOutUnprepareHeader
midiStreamStop
mmioStringToFOURCCA
waveInMessage
waveOutGetID
midiStreamPause
midiInGetErrorTextA
waveInStop
waveOutGetPlaybackRate
PlaySoundW
auxOutMessage
timeEndPeriod
joySetCapture
OpenDriver
mciSendCommandA
midiOutSetVolume
auxGetNumDevs
midiInGetNumDevs
midiOutCacheDrumPatches
auxSetVolume
DefDriverProc
joyGetPos
midiInAddBuffer
mixerGetID
midiOutGetNumDevs
midiInClose
waveOutGetDevCapsW
mixerSetControlDetails
waveInOpen
mciSetYieldProc
timeGetTime
SendDriverMessage
midiOutReset
midiStreamPosition
midiStreamClose
mixerGetLineControlsW
mixerGetControlDetailsA
mmioClose
midiInStart
mixerGetLineInfoA
PlaySoundA
timeBeginPeriod
mixerGetNumDevs
mixerClose
mmioOpenW
mmioDescend
midiOutPrepareHeader
timeKillEvent
midiOutGetID
timeSetEvent
mmioRenameW
mixerGetDevCapsA
mmioSetInfo
midiInGetDevCapsA

imagehlp

ImageDirectoryEntryToData
SymEnumerateSymbols
ImageNtHeader
SymSetOptions
ImageGetCertificateData
SymGetLineFromAddr
MapFileAndCheckSumW
ImagehlpApiVersionEx
BindImage
MakeSureDirectoryPathExists
SymGetModuleBase
UnDecorateSymbolName

mpr

WNetCloseEnum
MultinetGetConnectionPerformanceW
WNetUseConnectionW
WNetGetUserW
WNetOpenEnumA
WNetGetConnectionW
WNetAddConnectionW
WNetCancelConnectionA
WNetDisconnectDialog1W
WNetEnumResourceW

urlmon

MkParseDisplayNameEx
RegisterFormatEnumerator
URLDownloadToCacheFileA
HlinkNavigateMoniker
RevokeBindStatusCallback
HlinkGoForward
RegisterBindStatusCallback
CoInternetParseUrl

user32

ShowWindow
ModifyMenuA
MapVirtualKeyExW
GetDlgItemTextA
RemovePropA
LoadStringW
IsWindowEnabled
GetMenuItemCount
GetWindowLongA
SetForegroundWindow
SetClipboardData
RegisterWindowMessageA
LoadCursorA
AdjustWindowRect
PostMessageA
SetDlgItemInt
GetDlgItemTextW
GetKeyState
LoadImageA
GetCaretPos
AppendMenuW
SetRect
GetCapture
GetWindowTextA
ClientToScreen
MessageBeep
GetClipboardData
IsDlgButtonChecked
IsClipboardFormatAvailable
SetClassLongW
DrawIcon
VkKeyScanW
PeekMessageW
GetParent
CharUpperA
SetMenuDefaultItem
IsWindowVisible
CreateDialogIndirectParamA
SendInput
GetClipboardFormatNameW
DefFrameProcW
ValidateRect
SetScrollPos
SetCaretBlinkTime
CloseClipboard
CharNextW
CreateMenu
GetUserObjectInformationW
KillTimer
LockWindowUpdate
BringWindowToTop
GetSystemMetrics
GetKeyboardState
GetWindowModuleFileNameA
ScrollWindow
GetClassInfoW
IsCharAlphaW
FindWindowExW
SetWindowPos
GetDlgCtrlID
SetFocus
GetScrollRange
DrawTextW
IntersectRect
PostMessageW
GetDC
IsCharLowerA
SetActiveWindow
SendDlgItemMessageA
EnumDisplaySettingsW
WinHelpA
CopyAcceleratorTableW
GetSysColor
CharLowerA
TrackPopupMenu
CharToOemA
GetProcessWindowStation
GetWindow
DestroyMenu
CheckRadioButton
RemoveMenu
IsChild
GetSysColorBrush
TranslateAcceleratorA
LoadMenuW
SetCapture

rasapi32

RasDialW
RasDeleteEntryW
RasGetEntryDialParamsA
RasEnumEntriesA
RasCreatePhonebookEntryW
RasHangUpA
RasGetProjectionInfoA
RasEnumDevicesW
RasGetEntryPropertiesA
RasSetEntryPropertiesW
RasHangUpW
RasEnumEntriesW
RasEnumDevicesA
RasEditPhonebookEntryA
RasGetConnectStatusW
RasGetErrorStringA

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d2c017260c1c63f430929514d7cb701e

Headers

File Characteristics

Imports

gdi32

imm32

shlwapi

winmm

imagehlp

mpr

urlmon

user32

rasapi32

Sections

.text Size: 100KB - Virtual size: 97KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 16KB - Virtual size: 472KB

.rsrc Size: 216KB - Virtual size: 212KB

.text
Size: 100KB - Virtual size: 97KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 16KB - Virtual size: 472KB

.rsrc
Size: 216KB - Virtual size: 212KB