VirusShare_0aa65712be409e06b01a2614821b7b40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_0aa65712be409e06b01a2614821b7b40
Size

57KB
MD5

0aa65712be409e06b01a2614821b7b40
SHA1

d2428827e74041e9cf41f90aa7506ea15dfefb45
SHA256

621510744ec8b7f620717abc933f0b34b5be1d0c011964837fde7be70b5f1d98
SHA512

5cfc853cc4f695c1cc125595790747d61920e3cfe18b578bb99083dd64b10fa796e5767b46f6d025b56e409eea4555137c8c6865363696f23301260a27e3d3dc
SSDEEP

1536:8glBKUpijxfSxPGtQtXzN2gxdOdmTWK/7ay:vGjx60qzIgTOQTWK/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_0aa65712be409e06b01a2614821b7b40

Files

VirusShare_0aa65712be409e06b01a2614821b7b40
.exe windows:4 windows x86 arch:x86

0be74e7d41ec63d40f8e81bb58464f97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
CreateMailslotA
HeapCreate
GetProcessHeap
WaitForMultipleObjects
IsValidLocale
OpenMutexA
lstrcmpiA
lstrcmpiA
FileTimeToLocalFileTime
GetModuleFileNameA
lstrcmpiA
DeleteFileA
GetLogicalDriveStringsA
GetVolumePathNameA
Sleep
GetModuleHandleA
lstrcmpiA
lstrlenA
CreateNamedPipeA
lstrcmpiA
GetDriveTypeW
GetStdHandle

scecli

SceSysPrep
SceOpenPolicy
DeltaNotify
InitializeChangeNotify

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ