VirusShare_9fe1e58875e0d6ffd5b411cbbea016c0

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_9fe1e58875e0d6ffd5b411cbbea016c0
Size

240KB
MD5

9fe1e58875e0d6ffd5b411cbbea016c0
SHA1

293541735f20523829e04ec04490581f24fa92ea
SHA256

d8a956a08e2eca00cc53ace6ce9f7f07c298f65b47201b2b91dd77a346bb2a50
SHA512

8adcc8281d0d183db540401246b409d7d42fe80d77ae06bbb37f6a043a7ec56899df63e9305d43a77d8f1e015086ef224c50de026c98929b18cc9606a5c90ec0
SSDEEP

3072:WrRaGRywuvOEtwc5/b7p3FFmsyIfyvU/qgbGeHQ0EJjNt2KydtDzsIjr5WV2t2Fj:GeOEtVbFpwvAp16jytDzsq5Q1s+Hie

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_9fe1e58875e0d6ffd5b411cbbea016c0

Files

VirusShare_9fe1e58875e0d6ffd5b411cbbea016c0
.exe windows:5 windows x86 arch:x86

33959d57e46373a3160847edbe8e7d67

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SystemParametersInfoW
SendMessageA
RemoveMenu
GetClientRect
EnumDesktopWindows
MessageBoxIndirectW

oledlg

OleUIChangeIconW
OleUIChangeSourceW
ord1
ord11
OleUIBusyW

kernel32

TlsGetValue
HeapSize
GetProcessHeap
SetEndOfFile
CreateFileW
LoadLibraryW
IsProcessorFeaturePresent
HeapReAlloc
ReadFile
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetStdHandle
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetLastError
GetFileType
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapFree
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
DeleteCriticalSection
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
LCMapStringW
MultiByteToWideChar
Sleep
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
ExitProcess
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteConsoleW
SetFilePointer
FlushFileBuffers
CreateFileA

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33959d57e46373a3160847edbe8e7d67

Headers

DLL Characteristics

File Characteristics

Imports

user32

oledlg

kernel32

Sections

.text Size: 77KB - Virtual size: 77KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 13KB - Virtual size: 142KB

.rsrc Size: 128KB - Virtual size: 127KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 77KB - Virtual size: 77KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 13KB - Virtual size: 142KB

.rsrc
Size: 128KB - Virtual size: 127KB

.reloc
Size: 4KB - Virtual size: 4KB