VirusShare_477deabfb107855fccfe6a0e878234dc

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_477deabfb107855fccfe6a0e878234dc
Size

345KB
MD5

477deabfb107855fccfe6a0e878234dc
SHA1

b4dff528714c7eeef3d408daf98dd0ba3e5563cd
SHA256

4d453b0b9288ceff6346341884b920e3ec952c11f702cd4849553f4e4521e5af
SHA512

f69723c77b10753078b1b7a6f4ffa3e63a618d13fbb89761f5e5f31c11848cac8a1ce5b38796eb3f7dc715a0d9be8714b9808455a6de959df1957878d7ec423b
SSDEEP

6144:jj/Ol3/yKY/DA0oTahHIJEagt9LF5M3b5WWRfyp7t:fWl3mDFhBI0tJFqtE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_477deabfb107855fccfe6a0e878234dc

Files

VirusShare_477deabfb107855fccfe6a0e878234dc
.exe windows:4 windows x86 arch:x86

b9af3413a2e50bfadd743794e046bd5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathMakeSystemFolderW
PathUnquoteSpacesW
SHRegGetBoolUSValueA
StrToIntExA
SHGetValueA
PathQuoteSpacesW
SHRegGetUSValueA
PathFindExtensionW
SHRegOpenUSKeyW
PathIsUNCServerW
PathAddBackslashW
StrCSpnW
PathCanonicalizeW
PathSearchAndQualifyW
PathSetDlgItemPathW
PathCompactPathExW
SHDeleteKeyA
PathRemoveBlanksA
StrFormatByteSizeW
SHEnumKeyExW
SHRegWriteUSValueA
PathGetArgsA
PathIsContentTypeW
PathIsPrefixW
PathSkipRootA
PathStripPathW
PathRelativePathToA
PathIsFileSpecA
PathAddExtensionW
PathCanonicalizeA
SHDeleteValueW
PathIsUNCServerShareW
StrTrimW
PathCommonPrefixW
PathFindOnPathA
SHRegEnumUSKeyW
PathIsURLA
SHDeleteEmptyKeyA
PathRemoveFileSpecW
SHRegGetUSValueW
StrCpyW
PathRemoveFileSpecA
PathStripPathA
PathIsSystemFolderW
PathIsPrefixA
SHRegEnumUSKeyA
StrCSpnA
SHRegGetBoolUSValueW
SHRegCreateUSKeyW
PathSkipRootW
PathIsRootW
PathMatchSpecW
StrCmpW
PathIsRootA
PathIsFileSpecW
PathQuoteSpacesA
SHOpenRegStreamA
ChrCmpIW
PathGetArgsW
SHGetValueW
PathFindOnPathW
PathCompactPathW
SHCreateShellPalette
StrFormatByteSizeA
PathBuildRootW
StrNCatW
PathStripToRootW
PathFindFileNameA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

user32

AttachThreadInput
TranslateMDISysAccel
IsIconic
UnpackDDElParam
GetKeyboardLayoutNameA
GetMessagePos
VkKeyScanA
SetSystemCursor
CreateWindowExA
DdeDisconnectList
DefFrameProcA
DispatchMessageA
DdeEnableCallback
GrayStringA
SetWindowsHookA
GetSysColorBrush
FreeDDElParam
SetDlgItemTextW
SetCapture
SetProcessWindowStation
SetDlgItemTextA
GetPropW
GetDesktopWindow
EnumDisplaySettingsA
AppendMenuA
TranslateAcceleratorW
SetPropA
ChangeDisplaySettingsExW
EnableWindow
UnregisterClassA
OpenIcon
CheckMenuRadioItem
GetWindowRect
HideCaret
UnregisterClassW
GetWindowLongA
DrawTextExW
IsMenu
DestroyCursor
GetKeyboardType
GetClipboardData
SetKeyboardState
CreateDialogIndirectParamA
ShowScrollBar
GetIconInfo
DefWindowProcW
LoadCursorFromFileA
EnumDesktopWindows
DdeGetLastError
LoadCursorW
ScreenToClient
GetLastActivePopup
SetDoubleClickTime
GetPriorityClipboardFormat
SetMenuDefaultItem
DlgDirSelectComboBoxExW
FrameRect
IsWindowUnicode
RemoveMenu
CallMsgFilterA
ChildWindowFromPointEx
CheckRadioButton
DispatchMessageW
GetCursor
GetMenuItemInfoW
GetDlgItemTextA
IsRectEmpty
TranslateAcceleratorA
GetForegroundWindow
LoadAcceleratorsA
InsertMenuItemW
EnableScrollBar
SetForegroundWindow
GetMenuContextHelpId
LoadCursorA
GetSystemMetrics
CreateDialogParamA
SetWindowsHookExA
ShowOwnedPopups
ChangeMenuA
UpdateWindow
WINNLSEnableIME
GetCursorPos
MapVirtualKeyExA
ToAscii
GetWindowModuleFileNameW
GetWindowLongW
GetUpdateRect
DdeQueryStringA
DdeInitializeA

kernel32

GetStartupInfoA
ExitProcess
EnumResourceNamesW
FlushFileBuffers
GlobalWire
GetStringTypeExA
GetDateFormatW
GlobalMemoryStatus
AllocConsole
GetModuleHandleA
Toolhelp32ReadProcessMemory
GetStartupInfoA
ExitProcess
EnumResourceNamesW
FlushFileBuffers
GlobalWire
GetStringTypeExA
GetDateFormatW
GlobalMemoryStatus
AllocConsole
GetModuleHandleA
Toolhelp32ReadProcessMemory

comdlg32

FindTextA

advapi32

RegDeleteValueA

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9af3413a2e50bfadd743794e046bd5d

Headers

File Characteristics

Imports

shlwapi

msvcrt

user32

kernel32

comdlg32

advapi32

Sections

.text Size: 108KB - Virtual size: 107KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 3.6MB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 16KB - Virtual size: 12KB

.text
Size: 108KB - Virtual size: 107KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 3.6MB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 16KB - Virtual size: 12KB