VirusShare_7263864b3ff85cdf8f4f58ba64a5ba31

Sharing

Copy URL

Twitter E-mail

General

Target

VirusShare_7263864b3ff85cdf8f4f58ba64a5ba31
Size

364KB
MD5

7263864b3ff85cdf8f4f58ba64a5ba31
SHA1

b4d82b021896c4c9af8ab6cf61423ea845f74601
SHA256

8fef8a2b184c918e92c862b9b6a42973c88528b79ec56836d3fc4f2086b1deb5
SHA512

cc23d8141e75417361aea5b6916326c8abf445d99b3cedf514ca4569f8ba528e45c3d5f2bf31f376b04dacea541ab218649967b49465bc9a60386e88f94c9ab8
SSDEEP

6144:hlqOZ/f3sN9020oeXa1JFhUBztIPCtrL7N0HVteM5XkIUAiFN8o2oJVz:3qOVf3s303UFyBzyPCV7O1tBFAAcNFj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_7263864b3ff85cdf8f4f58ba64a5ba31

Files

VirusShare_7263864b3ff85cdf8f4f58ba64a5ba31
.exe windows:4 windows x86 arch:x86

5cefdf6d1c64811caa64555b9be043ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

RevokeBindStatusCallback
ObtainUserAgentString
RegisterMediaTypes
HlinkNavigateString
CreateAsyncBindCtxEx
SetSoftwareUpdateAdvertisementState
UrlMkGetSessionOption
UrlMkSetSessionOption
CoInternetCreateZoneManager
CreateFormatEnumerator
FindMediaType
CoInternetCompareUrl
IsLoggingEnabledA
HlinkGoBack
GetClassURL
HlinkSimpleNavigateToMoniker
CoInternetParseUrl
HlinkGoForward
HlinkSimpleNavigateToString
RegisterMediaTypeClass
ReleaseBindInfo
CoInternetQueryInfo
CoInternetGetSecurityUrl

imm32

ImmGetCompositionFontW
ImmInstallIMEW
ImmGetCandidateListCountW
ImmConfigureIMEW
ImmIsIME
ImmGetConversionStatus
ImmGetIMEFileNameA
ImmGetDefaultIMEWnd
ImmCreateContext
ImmAssociateContext
ImmGetContext
ImmDestroyContext
ImmSetCompositionStringW
ImmEscapeW
ImmUnregisterWordW
ImmSetCompositionFontW
ImmGetCompositionStringA
ImmSetCompositionFontA
ImmNotifyIME
ImmGetIMEFileNameW
ImmEnumRegisterWordA
ImmGetDescriptionA
ImmRegisterWordW
ImmGetGuideLineW
ImmGetCompositionFontA
ImmIsUIMessageW
ImmSetConversionStatus
ImmGetConversionListW
ImmGetCandidateWindow
ImmInstallIMEA

user32

GetScrollPos
GetCapture
IsWindowEnabled
DrawTextA
FillRect
wvsprintfA
PostThreadMessageA
SystemParametersInfoA
PostMessageA
ShowCursor
LoadKeyboardLayoutW
DrawStateW
MapWindowPoints
SetPropA
DestroyCursor
DefWindowProcA
EmptyClipboard
DrawTextW
OemToCharBuffA
MessageBoxA
TrackPopupMenuEx
CharPrevA
CopyIcon
SendDlgItemMessageA
DefFrameProcW
RegisterClassExW
GetDlgItem
TranslateAcceleratorA
SetWindowTextW
TrackPopupMenu
CopyImage
SetRect
LoadBitmapW
GetDlgItemTextW
GetWindowModuleFileNameA
GetMenuState
IsDialogMessageA
GetKeyNameTextW
SetFocus
GetClipboardData
GetForegroundWindow
SetTimer
ClientToScreen
GetMessagePos
WinHelpA
GetWindowTextA
PostMessageW
DialogBoxParamA
InvalidateRect
LoadCursorA
GetClassInfoExW
SetClassLongW
IsClipboardFormatAvailable
DrawIcon
SetCapture
IsCharAlphaW
SetWindowTextA
GetMessageExtraInfo
MoveWindow
RegisterClipboardFormatW
SetKeyboardState
FindWindowExW
RegisterClipboardFormatA
DrawFrameControl
IsWindowVisible
SystemParametersInfoW
SetDlgItemInt
GetWindow
GetMenuItemCount
IsChild
LoadImageA
DestroyMenu
GetKeyboardState
SetScrollPos
SetWindowPlacement
CharPrevW
CopyAcceleratorTableW
CharLowerW

rasapi32

RasGetProjectionInfoA
RasSetEntryPropertiesA
RasSetEntryPropertiesW
RasSetEntryDialParamsW
RasEditPhonebookEntryA
RasCreatePhonebookEntryW
RasGetErrorStringW
RasGetEntryDialParamsA
RasDeleteEntryA
RasEnumDevicesA
RasCreatePhonebookEntryA
RasGetConnectStatusW
RasGetEntryPropertiesA
RasHangUpW
RasValidateEntryNameW
RasSetEntryDialParamsA
RasEnumDevicesW
RasRenameEntryA
RasDialW
RasValidateEntryNameA
RasEnumEntriesA
RasGetEntryPropertiesW
RasGetProjectionInfoW
RasEnumEntriesW
RasDeleteEntryW
RasEditPhonebookEntryW
RasHangUpA

winmm

waveOutGetVolume
waveOutUnprepareHeader
midiStreamProperty
waveOutSetPitch
waveOutGetDevCapsA
midiOutGetErrorTextA
midiStreamStop
sndPlaySoundA
waveInStart
joyReleaseCapture
mciGetErrorStringA
midiOutSetVolume
midiStreamOpen
mixerGetNumDevs
mmioDescend
mciSendCommandA
waveOutGetID
waveInOpen
waveInGetErrorTextA
midiInUnprepareHeader
waveInGetErrorTextW
mmioSeek
waveInGetNumDevs
mmioOpenA
midiInOpen
SendDriverMessage
waveInUnprepareHeader
joyGetPosEx
midiOutMessage
joyGetNumDevs
timeSetEvent
mixerGetControlDetailsW
waveInMessage

gdi32

GetClipRgn
CreateCompatibleDC
GetNearestPaletteIndex
CreateICA
OffsetViewportOrgEx
FillRgn
PlayEnhMetaFile
CopyEnhMetaFileW
CreateDIBPatternBrushPt
SetViewportOrgEx
SetPixelFormat
GetBitmapBits
ScaleWindowExtEx
GetTextCharsetInfo
GdiFlush
SetTextColor
GetCharWidthA
Polyline
DeleteObject
PatBlt
ExtCreateRegion
MoveToEx
GetTextExtentPoint32A
SetBkColor
GetObjectType
SetROP2
CreateFontA
CreateDIBSection
GetDIBColorTable
CreateFontIndirectW
BeginPath
GetBrushOrgEx
SetTextAlign
GetTextFaceA
StretchBlt
CreateRoundRectRgn
GetEnhMetaFileBits
DPtoLP

imagehlp

SymSetOptions
GetTimestampForLoadedLibrary
RemoveRelocations
SymGetOptions
SymEnumerateModules
SymSetSearchPath
SymGetModuleBase
MapFileAndCheckSumW
SymCleanup
ImageRvaToVa
SymGetLineNext
SymGetSymFromAddr
ReBaseImage
FindExecutableImage
RemovePrivateCvSymbolic
GetImageConfigInformation
CheckSumMappedFile
BindImageEx
SymEnumerateSymbols
SymGetModuleInfo
ImageRvaToSection
SymLoadModule
SymGetSymFromName
ImageUnload
SymInitialize

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5cefdf6d1c64811caa64555b9be043ff

Headers

File Characteristics

Imports

urlmon

imm32

user32

rasapi32

winmm

gdi32

imagehlp

Sections

.text Size: 100KB - Virtual size: 96KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 12KB - Virtual size: 472KB

.rsrc Size: 216KB - Virtual size: 214KB

.text
Size: 100KB - Virtual size: 96KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 12KB - Virtual size: 472KB

.rsrc
Size: 216KB - Virtual size: 214KB