VirusShare_79c73b011a8a9898dfb3fb2d5f9ed9e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_79c73b011a8a9898dfb3fb2d5f9ed9e0
Size

58KB
MD5

79c73b011a8a9898dfb3fb2d5f9ed9e0
SHA1

2235eaefa1a89fcdd2f19d6ad492ee4b366ce822
SHA256

c60f183b64d99291225878636728c3b5977b407198bb3a1ecc00b3743b5c33d0
SHA512

ff307b167561141bdf0596735fac376c05545e09665339ba7d2d73c7188e3ca2177493e67dd7506dd8e9af233fad2047f436efe36a469f79afc85e79689146f1
SSDEEP

1536:Ce8DxGUq8fnxorsFS6kM7P4N8GRWlN5whjd:b8DxGKx2w7c0N5whjd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_79c73b011a8a9898dfb3fb2d5f9ed9e0

Files

VirusShare_79c73b011a8a9898dfb3fb2d5f9ed9e0
.exe windows:4 windows x86 arch:x86

142cd9c6836a56408e44e484dd9d69c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

crypt32

RegQueryValueExU
RegDeleteValueU
RegOpenKeyExU
RegCreateKeyExU
RegSetValueExU

kernel32

CreateFileA
InterlockedIncrement
GetTickCount
Sleep
HeapCreate
GetSystemDirectoryA
VirtualFree
ReadFile
GetStdHandle
CloseHandle

gdi32

UnrealizeObject
TextOutW
TextOutA
StretchDIBits
StretchBlt
StartPage
StartDocA
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetTextAlign
SetStretchBltMode
SetRectRgn
SetROP2
SetPixelV
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx

version

VerQueryValueW
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE