VirusShare_9cbae45540c5de705726b7897f18e5b4

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_9cbae45540c5de705726b7897f18e5b4
Size

67KB
MD5

9cbae45540c5de705726b7897f18e5b4
SHA1

01582942aa7ae22ac1d7e6bd08ec1d493c09b0b9
SHA256

822bcf17293b45fe3568583131a6b373a5d13af08874b023b2c52831c48920bf
SHA512

9772d1b799b587472a88976a55cee13ab4998ff704b68f63b22eb1bd6e267c5c7cde144b80ad899ca00f4902e81c2aa96b10b2ed152a854e1cdbbf4fa0a89e62
SSDEEP

1536:7y/WA/RJR7idS4KrVNJdZyP2/I1/okzUwdvQI0DN+:7c/RJR7oS4KDJdZC8JTwdv05

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_9cbae45540c5de705726b7897f18e5b4

Files

VirusShare_9cbae45540c5de705726b7897f18e5b4
.exe windows:4 windows x86 arch:x86

6b75be23bdad657987e7afdc6d9ee4bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glColor3uiv
glPushClientAttrib
glBindTexture
glGetError
glFogi
glTexCoord2i
glTexCoord2s
glColor3s
glTexCoord3fv
glInterleavedArrays
glRasterPos2dv
glTexCoord1s
glLoadMatrixd
glPixelStoref
glTexCoord1dv

user32

DialogBoxParamA
MessageBoxExA
GetSysColor
IsDialogMessageA
TileWindows
SetDlgItemTextA
SetWindowPos
FindWindowA
SendDlgItemMessageA

ole32

DoDragDrop
MkParseDisplayName
OleIsRunning
CreateDataCache
OleInitialize
StgIsStorageFile
ReleaseStgMedium
CoTaskMemRealloc
CoCreateInstance
CoTreatAsClass
CreateBindCtx

oledlg

ord5
ord4
ord1
ord7
ord11
ord3

gdi32

Chord
Escape
CopyMetaFileW
GetBrushOrgEx
GetBitmapDimensionEx
DeleteMetaFile
CreateDCW
CreateDiscardableBitmap
GdiSetBatchLimit
EnumObjects
EndPage
CreateSolidBrush
GetBkColor

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
GetStartupInfoA
GetLastError
GetEnvironmentStrings
GetEnvironmentVariableA
GetCurrentThreadId
CloseHandle
GetStdHandle
QueryPerformanceCounter
CopyFileA
DeleteFileA
TlsSetValue
GetHandleInformation

uxtheme

DrawThemeEdge

usp10

ScriptApplyLogicalWidth
ScriptGetProperties
ScriptStringXtoCP
ScriptPlace
ScriptGetFontProperties
ScriptString_pcOutChars
ScriptString_pSize
ScriptTextOut
ScriptItemize
ScriptStringGetOrder
ScriptGetCMap
ScriptXtoCP
ScriptLayout
ScriptString_pLogAttr

wsnmp32

ord603
ord302
ord606
ord999
ord901
ord100
ord600
ord605
ord203
ord300

comdlg32

PageSetupDlgA
PrintDlgW
FindTextA
ReplaceTextW
GetOpenFileNameW
PrintDlgA
GetSaveFileNameW

msvcrt

fputs
free
fwrite
fseek
freopen
ftell
fputc
fopen
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b75be23bdad657987e7afdc6d9ee4bd

Headers

File Characteristics

Imports

opengl32

user32

ole32

oledlg

gdi32

kernel32

uxtheme

usp10

wsnmp32

comdlg32

msvcrt

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 44KB - Virtual size: 43KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 44KB - Virtual size: 43KB

.reloc
Size: 1KB - Virtual size: 1KB