VirusShare_9b855f77e84b1bf7f62d9d3c5e6ccfd5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_9b855f77e84b1bf7f62d9d3c5e6ccfd5
Size

305KB
MD5

9b855f77e84b1bf7f62d9d3c5e6ccfd5
SHA1

b6c6e86affd697d2e0df2152a786c3eb3aafc47b
SHA256

2b2f0ec195a659b25750e9abccda3c85f44eafc939de9e9f2bc0de9f0a90e052
SHA512

d01dd6890f0111011c284a19cd958fd70b8ea8e2e99a84a9380cfa098674377fd8997fef763e593fcd5f8133d75cbe1e96d9e5d58372e8cdd4c14fd779aa97eb
SSDEEP

6144:yyXbg1kpLk7BOVqvkg2ylIuTJVQ8lo/5bDiMsmK3g3XSh7thexRm:yMgu2BOMlIu9Zo/V2F3jejm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_9b855f77e84b1bf7f62d9d3c5e6ccfd5

Files

VirusShare_9b855f77e84b1bf7f62d9d3c5e6ccfd5
.exe windows:4 windows x86 arch:x86

4013c457f579d86dc1e5c7a5cd1dfa06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetGetProviderNameA

advapi32

SetSecurityDescriptorGroup
ControlService

user32

DdeCreateStringHandleA
DdeQueryNextServer
GetCursor
LoadBitmapW
ArrangeIconicWindows
DrawTextExW
GetActiveWindow
MessageBeep
FrameRect
CreateMDIWindowW
NotifyWinEvent
GetKeyboardLayoutNameW
DefWindowProcW

kernel32

DeleteFileA
GetDiskFreeSpaceExA
GetFileType
GetFileAttributesA
GetCompressedFileSizeW
ContinueDebugEvent
CreateNamedPipeW
GetEnvironmentStringsW
GetCurrentDirectoryA

msvcrt

_eof

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ