VirusShare_40550e4313decb096d6300d7bc0e006f | Triage

Sharing

General

Target

VirusShare_40550e4313decb096d6300d7bc0e006f
Size

332KB
MD5

40550e4313decb096d6300d7bc0e006f
SHA1

2d7154c146ba334d7f6862df6df9cebd89863ff2
SHA256

0e73a69cb50ed4cc7e45c5b5913b7ed3b0b2ecb5ac946e0be78f026622bde396
SHA512

1a3a903d4949a19acb2ca9adb09ce83432f5c28d017655a4a9f30bce111f293c78a38c920e81272f26577999d3dc099d8bcbfc78fd0c0ee6cd80c6bb0913ce2e
SSDEEP

6144:7cMG0Cmis0NH8A3/1uz7uodnIm5KJHLqreJDckzrYk/:AMZas0NcAvAzyQnR5KJHWreJRrY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
VirusShare_40550e4313decb096d6300d7bc0e006f

Files

VirusShare_40550e4313decb096d6300d7bc0e006f
.exe windows:4 windows x86 arch:x86

7e80bb2ba5a5605107e2e82853bd32db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateIconFromResource
SendMessageA
CreateIconFromResourceEx

advapi32

SetNamedSecurityInfoA
GetFileSecurityA
GetTrusteeTypeA
GetTrusteeFormA

version

VerInstallFileA

mpr

WNetGetProviderNameA
WNetDisconnectDialog1A
WNetAddConnectionA

kernel32

MapViewOfFile
GetTimeFormatA
Thread32Next
CreateMutexW

mfc42

ord3738
ord4424
ord1045
ord4080
ord1576
ord561
ord5731
ord3079
ord3825
ord3831
ord3830
ord1046
ord2976
ord3081
ord2985
ord3262
ord1080
ord4465
ord3259
ord1023
ord2982
ord1040
ord5714
ord1029
ord815
ord6375
ord4486
ord1051
ord1059
ord1168
ord3922
ord1089
ord1091
ord2396
ord1018
ord1046
ord5302
ord2725
ord1046
ord1091
ord5307

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ