VirusShare_3c0fc936a25756d0ecfa20b483f28700

Sharing

Copy URL

Twitter E-mail

General

Target

VirusShare_3c0fc936a25756d0ecfa20b483f28700
Size

99KB
MD5

3c0fc936a25756d0ecfa20b483f28700
SHA1

338eeaeab4ed6de2a99fdd9c4ab5cf07efb4bf22
SHA256

999bf3386f160cd0176a4ee9578245ff8390c26f1f560510b6ea56740493f684
SHA512

2cf9b560f223c5169ce00e50e95ef0af27d91774af476d9f5b6cf84f5461e450dbd704d97b34eec6d2a8ea92601cabd1b4c4672ab39e1b3c79cce1253f97536e
SSDEEP

1536:jWDL2WaTc9GAe3vd3ceBrhEtKET2PToMpa2+fDuoaeQC9KmIqiTglI9LJ:jyT7etcihEtxyPToMmfDrQC9KBTg61J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_3c0fc936a25756d0ecfa20b483f28700

Files

VirusShare_3c0fc936a25756d0ecfa20b483f28700
.exe windows:4 windows x86 arch:x86

539cce5d2d3d6f3c26cab79b6cee682d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

DrawStatusTextW
ord3
CreatePropertySheetPageA
ord6
ord5
ord8
InitializeFlatSB
CreatePropertySheetPageW
ord16
InitCommonControlsEx
_TrackMouseEvent

shlwapi

StrRChrW
StrRChrIW
StrChrIW
StrCmpNA
StrChrA

kernel32

LocalUnlock
GetUserDefaultLangID
OpenMutexA
HeapUnlock
LocalFlags
HeapDestroy
GetModuleHandleA
GetProcAddress
PulseEvent
GetLastError
GetCommandLineA
LocalFree
GetStartupInfoA
SetEvent
VirtualAllocEx
GetEnvironmentStrings
GetExitCodeThread
GetCurrentProcessId
OpenSemaphoreA
CopyFileA
LocalHandle
OpenEventA
GetCurrentProcess
GetFullPathNameA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
WriteFile
InitializeCriticalSection
DeleteCriticalSection
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
ReadFile
GetCurrentDirectoryA
GetDriveTypeA
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapCreate
VirtualFree
RtlUnwind
SetStdHandle
CloseHandle
CreateFileA
VirtualAlloc
HeapReAlloc
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

uxtheme

GetThemeSysColorBrush

cryptui

CryptUIWizExport
CryptUIDlgViewContext
CryptUIWizImport
CryptUIWizDigitalSign

comdlg32

ReplaceTextW
GetFileTitleA
PrintDlgA
FindTextA
GetSaveFileNameA
PrintDlgW
ChooseColorW
GetOpenFileNameW
GetSaveFileNameW

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

539cce5d2d3d6f3c26cab79b6cee682d

Headers

File Characteristics

Imports

comctl32

shlwapi

kernel32

uxtheme

cryptui

comdlg32

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 13KB

.rsrc Size: 43KB - Virtual size: 42KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 13KB

.rsrc
Size: 43KB - Virtual size: 42KB

.reloc
Size: 4KB - Virtual size: 4KB