VirusShare_20e125a7efe9d68820c8d18cd0c68d60

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_20e125a7efe9d68820c8d18cd0c68d60
Size

101KB
MD5

20e125a7efe9d68820c8d18cd0c68d60
SHA1

5847b99967c6d16cad78e3c4d77ca6e02cecdc47
SHA256

53f17fbc575782b8cb15d893a5a09856686abec96798d4079b5239822a74c41e
SHA512

5b2b89e9cc8fe0612a2528731a1a102b24c8833fea8b40a0de97c3cf16f16c99af6f0c8c75394ac0cc0cdde0813287fd64b3b78eeafbdb11c39e0b2f0f545eee
SSDEEP

1536:xfJED9jADTGuFAWg7BB4oXxExTdEpoDRgmAa3F119Y0:xfJq1VWg7BB4oXehEaDRYIF119Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_20e125a7efe9d68820c8d18cd0c68d60

Files

VirusShare_20e125a7efe9d68820c8d18cd0c68d60
.exe windows:4 windows x86 arch:x86

f763228ab3b09b46372f8b92995e7b3c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glTexCoord1sv
glRasterPos2sv
glTexEnviv
glIndexfv
glGetClipPlane
glRectdv
glGetTexEnviv
glTexCoord4dv
glGetString
glColor3f
glVertex2fv
glGetPixelMapfv

glu32

gluLoadSamplingMatrices
gluSphere
gluQuadricNormals
gluTessCallback
gluEndTrim
gluCylinder
gluBeginSurface
gluNewQuadric
gluErrorUnicodeStringEXT
gluEndCurve

kernel32

GetCPInfo
PulseEvent
GetUserDefaultLCID
VirtualFree
VirtualQueryEx
ReleaseMutex
HeapReAlloc
GetModuleHandleA
GetProcAddress
OpenSemaphoreA
LocalReAlloc
ResetEvent
GetTickCount
GetEnvironmentVariableA
GetCurrentProcess
OpenMutexA
SuspendThread
FreeEnvironmentStringsA
CopyFileA
VirtualAlloc
GetCurrentThreadId
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetLastError
SetFilePointer
FlushFileBuffers
WriteFile
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
SetStdHandle
CloseHandle
CreateFileA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
ReadFile
LCMapStringA
LCMapStringW

uxtheme

GetThemeSysString

wsnmp32

ord302
ord606
ord604
ord901
ord905
ord400
ord104
ord200

comdlg32

FindTextA
PageSetupDlgW
PrintDlgA
FindTextW
ChooseColorW
GetFileTitleA
GetOpenFileNameA
ChooseColorA
ReplaceTextA

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f763228ab3b09b46372f8b92995e7b3c

Headers

File Characteristics

Imports

opengl32

glu32

kernel32

uxtheme

wsnmp32

comdlg32

Sections

.text Size: 35KB - Virtual size: 34KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 13KB

.rsrc Size: 45KB - Virtual size: 44KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 35KB - Virtual size: 34KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 13KB

.rsrc
Size: 45KB - Virtual size: 44KB

.reloc
Size: 4KB - Virtual size: 4KB