VirusShare_a91d29b2358c29847448676c90eff283 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_a91d29b2358c29847448676c90eff283
Size

384KB
MD5

a91d29b2358c29847448676c90eff283
SHA1

64dafe484e618cb8fa67fb60716d5bfce7da45cb
SHA256

331bf5afc98b4e4d44c60d25e0045693f5e4d04e40ba7e8ae268c9a193ae683c
SHA512

cf6365f2e99c8fb8b1558c3887582b7d5bd068a62f7fee79ccd4d8ca1858fabdc82f5aaed6b93a5bc08ac54883fd067ab8ec6803ed83d7db2dafdc545c9204c7
SSDEEP

12288:RE4Skfuk5k9820R9Hf9Bkd/iIg4qOQviUynbFI:RE4lbW82wF2Bi/9NObFI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_a91d29b2358c29847448676c90eff283

Files

VirusShare_a91d29b2358c29847448676c90eff283
.exe windows:4 windows x86 arch:x86

61eaf487686dd2046fd3e972c2e0a300

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

crypt32

RegQueryValueExU
RegDeleteValueU
RegQueryValueExU
RegOpenKeyExU
RegSetValueExU

kernel32

HeapCreate
InterlockedIncrement
GetTickCount
Sleep
CreateFileA
GetSystemDirectoryA
VirtualFree
ReadFile
GetStdHandle
CloseHandle

advapi32

RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 512B - Virtual size: 439B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 379KB - Virtual size: 879KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE