VirusShare_34016905603c92a45b2de5810c3cc92c

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_34016905603c92a45b2de5810c3cc92c
Size

624KB
MD5

34016905603c92a45b2de5810c3cc92c
SHA1

8e8586264904455ade7a9557e4fc6fb5e3939ab0
SHA256

29ffc26ba24154f9dcb0f391cac5e2bd69acaa4ba58932faeab3769829324304
SHA512

f8f32ceaa9d616756d263ad9af865c10ff1cb279e537e3568cff5fdc28d3a14f5307ec4549a32611aeb2095db9f07fe176ed01fc890d1aaecee9899cbc239728
SSDEEP

12288:wGCQZWc5/0vYucd5jEfuTW1RSeQ/VWKvYucd5jEfuTW1R:NCQkc5/cYuE5ECWriWaYuE5ECW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_34016905603c92a45b2de5810c3cc92c

Files

VirusShare_34016905603c92a45b2de5810c3cc92c
.exe windows:4 windows x86 arch:x86

cab357a6a3172a4ecf76ca0598d89fac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasGetCountryInfoA
RasEnumDevicesA

imm32

ImmGetCompositionWindow
ImmGetProperty
ImmUnregisterWordA
ImmSetConversionStatus
ImmGetContext
ImmGetGuideLineA
ImmSetCandidateWindow
ImmGetCompositionStringA
ImmSetStatusWindowPos
ImmGetConversionListA
ImmReleaseContext
ImmGetOpenStatus
ImmGetDefaultIMEWnd

user32

DrawIcon
EnableWindow
SendMessageA
IsIconic
LoadIconA
GetSystemMetrics
GetClientRect

msvcrt

_controlfp
??2@YAPAXI@Z
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
pow
_access
cosh
_onexit
__dllonexit
iswupper
_cwprintf
_setmbcp

advapi32

GetSecurityDescriptorSacl

gdi32

DeleteDC
ResetDCW
UnrealizeObject
EnumFontsW
GetEnhMetaFileW
GetWorldTransform
FillRgn
GetBrushOrgEx
ExtCreateRegion
PolyBezier
CloseFigure
SetWindowOrgEx
CloseEnhMetaFile
GetTextExtentPoint32W
GetMetaFileBitsEx
GetObjectA
RectVisible
EndPath
PolyBezierTo
GetPixel
ExtTextOutA
GetTextExtentPointA
SetPixelFormat
GetPolyFillMode
BitBlt
GetDeviceGammaRamp
SetColorSpace
CreateRoundRectRgn
DeleteColorSpace
Polyline
Ellipse
SetMapMode
GetMapMode
EnumFontFamiliesExW
GetTextMetricsA
SetMetaFileBitsEx
CreateHatchBrush
CreateDIBPatternBrushPt
GetBkMode
SetWorldTransform
GetNearestPaletteIndex
SetBkMode
GetClipRgn
GetClipBox
GetGlyphOutlineA
CreateFontIndirectW
GetDCOrgEx
CreateICW
GetTextAlign
SetColorAdjustment
SetBitmapBits
GetCharWidthA
SetArcDirection
PlayEnhMetaFileRecord
OffsetWindowOrgEx
Polygon
StartDocA
GetKerningPairsA
EnumEnhMetaFile
PolyPolyline
CombineRgn
ExtSelectClipRgn
Escape
SetTextCharacterExtra
GetWindowOrgEx
GetSystemPaletteEntries
ResizePalette
MoveToEx
SetViewportExtEx
SetViewportOrgEx
CancelDC
Pie
SetPixel
SetROP2
DeleteEnhMetaFile
SaveDC
StretchBlt
OffsetClipRgn
SetPolyFillMode
RestoreDC
PolyDraw
RemoveFontResourceA
ExtFloodFill
ScaleWindowExtEx
PlayEnhMetaFile
SetMetaRgn
CreatePolygonRgn
RemoveFontResourceW
GetDIBColorTable
CreateFontW
GetFontData
CreateDCW
GetDeviceCaps
PtVisible
MaskBlt
GetGlyphOutlineW
CreateRectRgn
EqualRgn
PlayMetaFileRecord
SelectClipRgn
GetBkColor
GetROP2
SetPixelV
GetTextFaceA
IntersectClipRect
CreateCompatibleBitmap
FillPath
CombineTransform
CreateRectRgnIndirect
EnumFontsA
CreatePenIndirect
EnumMetaFile
EndDoc
EnumFontFamiliesA
GetDIBits
GetViewportOrgEx
WidenPath
CreateFontA
SetGraphicsMode
CreateFontIndirectA
CreateSolidBrush
GetRgnBox
UpdateColors
LPtoDP
OffsetViewportOrgEx
EndPage
GetTextExtentPoint32A

kernel32

GetThreadTimes
GetEnvironmentStrings
GetFileSize
GetModuleHandleA
CreateMutexA
GetStartupInfoA

mfc42

ord4234
ord4710
ord1168
ord324
ord755
ord470
ord1050
ord4425
ord4627
ord1089
ord1069
ord1001
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord1058
ord4441
ord2379
ord4837
ord3798
ord5280
ord4353
ord1576
ord1061
ord6374
ord1013
ord4274
ord6375
ord4486
ord2554
ord1003
ord5731
ord3922
ord1089
ord1048
ord2396
ord3346
ord1097
ord5302
ord2725
ord1080
ord4698
ord5307
ord1051
ord5714
ord2982
ord1009
ord3259
ord4465
ord1072
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord1081
ord4424
ord3738
ord561
ord815
ord2514
ord641
ord5265
ord4376
ord4853
ord4998
ord6052
ord4078
ord1775
ord4407
ord1073
ord2385
ord5163

Sections

.text
Size: 364KB - Virtual size: 361KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cab357a6a3172a4ecf76ca0598d89fac

Headers

File Characteristics

Imports

rasapi32

imm32

user32

msvcrt

advapi32

gdi32

kernel32

mfc42

Sections

.text Size: 364KB - Virtual size: 361KB

.rdata Size: 36KB - Virtual size: 32KB

.data Size: 8KB - Virtual size: 1.9MB

.rsrc Size: 212KB - Virtual size: 210KB

.text
Size: 364KB - Virtual size: 361KB

.rdata
Size: 36KB - Virtual size: 32KB

.data
Size: 8KB - Virtual size: 1.9MB

.rsrc
Size: 212KB - Virtual size: 210KB