VirusShare_09c6d60131421b2b5214e23f646ee5ca

General

Target

VirusShare_09c6d60131421b2b5214e23f646ee5ca
Size

100KB
MD5

09c6d60131421b2b5214e23f646ee5ca
SHA1

785a442d9a176907e7b0ba58189c430963e4d0e2
SHA256

4c93a949237bc367b8ab5073298cd76495039058b9cb566d41f2b443b3f43661
SHA512

34ddfc9c9517d5b95b6df663e3ee3b24c1a208779405a56364463ab764bee3728f7361145269b6ba0df09931297f82fc4abc85953525fd0999745b80605faa7a
SSDEEP

1536:atggE/lvW1UjU+Vc7X89ZjIxAo4VauIGuh/RrP6+Z:a0/tWGc7X89ZjIGo4Va/ZRj6+Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_09c6d60131421b2b5214e23f646ee5ca

Files

VirusShare_09c6d60131421b2b5214e23f646ee5ca
.exe windows:4 windows x86 arch:x86

f46ddd0ae8606595ec180a257f3c4fab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\temp\glms.pdb

Imports

kernel32

GetModuleHandleA
GetLocalTime
InterlockedExchange
TerminateProcess
GetProcAddress
Sleep
GetTickCount
OpenMutexA
LoadLibraryA
GetLastError
DeleteFileA
LoadLibraryExW
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
HeapSize
LCMapStringA
VirtualQuery

user32

ShowWindow
EnableWindow
LoadIconA
GetActiveWindow
PostMessageA
DestroyWindow

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f46ddd0ae8606595ec180a257f3c4fab

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 68KB - Virtual size: 66KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 68KB - Virtual size: 66KB