VirusShare_3b240ca653bd5467b19e195889c07c6e

General

Target

VirusShare_3b240ca653bd5467b19e195889c07c6e
Size

369KB
MD5

3b240ca653bd5467b19e195889c07c6e
SHA1

bfb732fd34099fb9f4467cfab185a4bf3bb28e95
SHA256

62aaa2a24236be5ae371e5851370f24e6261025cf4bf539b7c40bdefc6ad07e6
SHA512

32242830aaf7fee32d16e86da4d602640fd360f24ae309bc5391c130ca384b951ac97f9ecc1f596bd7c7b3933c589dbd87ee872b4dfd8cda62835143e04e0296
SSDEEP

6144:fo07Ev9jgh+J0J+l/moekR1MlvlMa0FIe03ncsCMYZx/FqDN6TETpspvQrMX1r9:ftQVG+JIe/mGzMNlMVFC3Xi/YwOi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
VirusShare_3b240ca653bd5467b19e195889c07c6e

Files

VirusShare_3b240ca653bd5467b19e195889c07c6e
.exe windows:4 windows x86 arch:x86

fa472a98ed15899bd6b764aeb995d7e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetConnectionDialog
WNetAddConnectionA
WNetCancelConnectionA
WNetDisconnectDialog
WNetAddConnection2A

gdi32

CreateEllipticRgn
EnumFontFamiliesExW
Rectangle
GetEnhMetaFileBits
PlayEnhMetaFile
SetColorAdjustment
IntersectClipRect
CreateCompatibleDC
GetTextAlign
ExtFloodFill
LPtoDP
StartDocW
CreateCompatibleBitmap
StrokePath
GetKerningPairsA
FillRgn
GetBitmapBits
SetPixelFormat
SetPolyFillMode
ScaleWindowExtEx
GetTextExtentPointA
GetTextExtentPoint32W
BitBlt
RealizePalette
SelectClipRgn
GetMapMode
CreatePen
EndPage
CreateFontW
GetCharABCWidthsW
Polyline
GetROP2
StartPage
PlayEnhMetaFileRecord

oleaut32

LPSAFEARRAY_UserFree

msvcrt

__getmainargs
wctomb
vprintf
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_acmdln
pow
_fcloseall
_iob
_onexit
__dllonexit

advapi32

BuildExplicitAccessWithNameA
GetTrusteeTypeA
BuildImpersonateTrusteeA
CreateServiceA
GetTrusteeFormA

user32

CreateIconFromResource
SendNotifyMessageA

kernel32

OpenSemaphoreA
Module32Next
GetCommandLineA

Sections

.text
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa472a98ed15899bd6b764aeb995d7e6

Headers

File Characteristics

Imports

mpr

gdi32

oleaut32

msvcrt

advapi32

user32

kernel32

Sections

.text Size: 92KB - Virtual size: 90KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 56KB - Virtual size: 1.1MB

.rsrc Size: 68KB - Virtual size: 66KB

.text
Size: 92KB - Virtual size: 90KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 56KB - Virtual size: 1.1MB

.rsrc
Size: 68KB - Virtual size: 66KB