VirusShare_5885d072fb73bdd355e85b67bcde3bfd

Sharing

Copy URL Twitter E-mail

General

Target
VirusShare_5885d072fb73bdd355e85b67bcde3bfd
Size 368KB
Sample240610-nrj3pshd2v
SHA256 d3f5990770291c25a4ff14e8a6fe033f7ad1689c6206ed41eb7ed253a1c2c348
MD5 5885d072fb73bdd355e85b67bcde3bfd
SHA1 538b93b18131e4d9de79f87f6b156c2d46895045
SHA512 7da4dbbb0c98cd2ad56ffe28a23ed67e66583a0822e0e16aadfa102447d7a22acbd9e526fc9a9ee3ecae68389b02e12347182a64829cd762559ed083ee94882e
SSDEEP 6144:iQNUdPR6oncUtPLJoJi8ju8FQNXsyR36GeHba2grj9F4SENppTUHtnvR3aF3J9PQ:XNUdc6wA8P2cyF6T7a2gH9F4dzhUl6rP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_5885d072fb73bdd355e85b67bcde3bfd

File Explorer

VirusShare_5885d072fb73bdd355e85b67bcde3bfd

.exe 368KB

VirusShare_5885d072fb73bdd355e85b67bcde3bfd

IMPHASH 10e51eb9a3fe22714169d210a979dc4c
SHA256 d3f5990770291c25a4ff14e8a6fe033f7ad1689c6206ed41eb7ed253a1c2c348
MD5 5885d072fb73bdd355e85b67bcde3bfd
SHA1 538b93b18131e4d9de79f87f6b156c2d46895045
SHA512 7da4dbbb0c98cd2ad56ffe28a23ed67e66583a0822e0e16aadfa102447d7a22acbd9e526fc9a9ee3ecae68389b02e12347182a64829cd762559ed083ee94882e
SSDEEP 6144:iQNUdPR6oncUtPLJoJi8ju8FQNXsyR36GeHba2grj9F4SENppTUHtnvR3aF3J9PQ:XNUdc6wA8P2cyF6T7a2gH9F4dzhUl6rP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

100252

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

imagehlp

ImageGetCertificateHeader

advapi32

RegCreateKeyExW RegNotifyChangeKeyValue RegDeleteValueW GetLengthSid QueryServiceLockStatusW AddAccessAllowedAce DeleteService InitializeSecurityDescriptor RegCreateKeyA DeleteAce QueryServiceConfigA GetSidSubAuthorityCount RegCreateKeyW RegEnumKeyExA LsaQueryInformationPolicy GetSidIdentifierAuthority GetFileSecurityW CopySid OpenSCManagerW CreateServiceW GetUserNameW GetServiceDisplayNameW RegSetValueA ControlService RegReplaceKeyA EnumDependentServicesW LookupAccountNameW ChangeServiceConfig2A RegisterServiceCtrlHandlerA SetEntriesInAclA RegQueryInfoKeyA LsaAddAccountRights QueryServiceStatus GetKernelObjectSecurity SetSecurityDescriptorSacl RegQueryInfoKeyW ReportEventW RegEnumKeyW ReadEventLogW RegRestoreKeyW DecryptFileW AdjustTokenPrivileges RegCloseKey AddAce LsaFreeMemory RegOpenKeyExA InitializeAcl RegSetValueW LogonUserA StartServiceCtrlDispatcherW SetSecurityDescriptorOwner ReportEventA CreateProcessAsUserA SetFileSecurityA RegDeleteKeyA RevertToSelf RegOverridePredefKey OpenServiceA EncryptFileW InitializeSid StartServiceA LsaRetrievePrivateData GetSidSubAuthority ChangeServiceConfigW RegUnLoadKeyW RegSetKeySecurity RegisterServiceCtrlHandlerW RegSetValueExW AllocateAndInitializeSid ChangeServiceConfigA SetFileSecurityW FreeSid LockServiceDatabase OpenSCManagerA RegisterEventSourceA LookupPrivilegeValueA ChangeServiceConfig2W OpenEventLogW OpenProcessToken GetAce EnumDependentServicesA RegConnectRegistryA SetThreadToken GetUserNameA ImpersonateSelf LsaOpenPolicy SetNamedSecurityInfoW LookupAccountNameA LookupPrivilegeValueW SetServiceObjectSecurity GetAclInformation RegOpenKeyExW

gdi32

GetTextFaceA CreateMetaFileA ScaleViewportExtEx CreateBitmap CopyEnhMetaFileA PolyBezierTo GetTextAlign SetPixelV CreateFontIndirectW TextOutA

user32

KillTimer ScrollWindowEx PeekMessageW VkKeyScanExW SetWindowTextW DialogBoxParamA IsCharAlphaW CloseDesktop GetClipCursor ScrollWindow IsClipboardFormatAvailable DrawTextA LoadIconA SetWindowPlacement CharPrevW RemoveMenu TrackPopupMenu GetClipboardViewer ReleaseDC GetOpenClipboardWindow GetPropA EnumDisplaySettingsW GetUserObjectInformationW ShowWindow GetCapture CharNextA PackDDElParam GetLastActivePopup DefWindowProcA CreatePopupMenu PostMessageW DrawTextW DialogBoxIndirectParamA AdjustWindowRect GetMenu BringWindowToTop GetClipboardFormatNameW GetKeyState TranslateAcceleratorW TranslateMessage ScreenToClient IsWindowVisible CharLowerA DeferWindowPos GetCaretPos OemToCharBuffA CloseWindow MapVirtualKeyA SendDlgItemMessageA LoadKeyboardLayoutW FindWindowExA CreateDialogIndirectParamA DestroyMenu SetForegroundWindow VkKeyScanW DrawFrameControl IsCharLowerA GetWindowRect SetScrollPos GetDlgItemTextW WaitMessage GetClassInfoA DdeClientTransaction GetTabbedTextExtentA ClipCursor EnumThreadWindows EmptyClipboard IsWindowEnabled GetDoubleClickTime CharToOemA GetClassNameA BlockInput IsDlgButtonChecked PostThreadMessageW LoadAcceleratorsA ChangeDisplaySettingsW InvalidateRect FindWindowExW GetSysColorBrush GetWindowTextLengthA CheckRadioButton LoadCursorFromFileA RegisterClipboardFormatW FindWindowA IsIconic SetRect ClientToScreen AttachThreadInput InsertMenuW WindowFromDC GetClassLongA GetMenuItemCount LoadBitmapW DrawAnimatedRects SetWindowTextA UnionRect GetMenuItemID UnhookWindowsHook ShowCursor FrameRect DrawIcon TrackPopupMenuEx GetDlgItemInt LoadBitmapA CallWindowProcA DestroyAcceleratorTable CopyAcceleratorTableW DestroyCursor PostQuitMessage GetDC ToAscii WindowFromPoint OffsetRect SetWindowPos TranslateMDISysAccel EnableWindow UnhookWinEvent CopyIcon DrawTextExA GetProcessWindowStation wvsprintfA GetClipboardData GetWindowModuleFileNameA DdeAccessData GetCursorPos CharUpperW ChangeDisplaySettingsA GetKeyboardLayoutNameW DispatchMessageA CharUpperA GetWindowWord PostMessageA PaintDesktop SendInput SystemParametersInfoW GetWindowLongW GetMessageA DispatchMessageW LoadStringW IsCharAlphaNumericA RegisterClipboardFormatA SetRectEmpty GetDlgItemTextA

msvcrt

_setmbcp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln abs _i64tow ldiv _onexit __dllonexit _pipe _controlfp

mfc42

ord1576 ord561 ord3738 ord4424 ord1046 ord4080 ord3079 ord3825 ord3831 ord3830 ord3401 ord2976 ord3081 ord2985 ord3262 ord1071 ord4465 ord3259 ord1045 ord2982 ord3953 ord5714 ord1017 ord5307 ord4698 ord1037 ord2725 ord5302 ord1074 ord3346 ord2396 ord1007 ord1089 ord3922 ord5731 ord1051 ord2554 ord4486 ord6375 ord815 ord1168

kernel32

GetStartupInfoA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

VirusShare_5885d072fb73bdd355e85b67bcde3bfd

imagehlp

advapi32

gdi32

user32

msvcrt

mfc42

kernel32

generic