VirusShare_5ef1fdd422951c153db8c39b87e84e5d | Triage

Sharing

General

Target

VirusShare_5ef1fdd422951c153db8c39b87e84e5d
Size

356KB
MD5

5ef1fdd422951c153db8c39b87e84e5d
SHA1

a89966004343653b2d20c06b373b1390ed0450d3
SHA256

b5a35f6dc7bc0708cfa5b5fb39472509eb81c22ccd93bdb563305164381a1d3e
SHA512

94a775ab67babe692fd6cc6c597453f3607e39627579ec82575025a1c1aa3015a108418852a64d84e4fb8c2a5ef4b5619284b25d52a5790b5e3ef11153c11871
SSDEEP

6144:nOWcl+ocAAe1EAnT43osv0pnzKK+PDncAuLELquaWVzsHA93Wo8nswPm22fwh:nFeq0F+PzcOLyWRsHA93/oswe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
VirusShare_5ef1fdd422951c153db8c39b87e84e5d

Files

VirusShare_5ef1fdd422951c153db8c39b87e84e5d
.exe windows:4 windows x86 arch:x86

8d99023a51a2afe075f983867689c9f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

PlayEnhMetaFileRecord
GetSystemPaletteEntries
EqualRgn
EndPage
ExtSelectClipRgn
CancelDC
GetROP2
DPtoLP
LPtoDP
CreateDCW
DeleteEnhMetaFile
GetTextExtentPoint32W
CreateFontW
SetPixelFormat
FillPath
GetBkColor
Polygon

msvcrt

_inpw
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_eof
printf
_jn
_onexit
__dllonexit
scanf
__pioinfo
_controlfp

advapi32

CreateProcessAsUserA
SetSecurityDescriptorGroup
CreateServiceA

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ