VirusShare_ead6076ad64ac676d6b8bef84b59c800

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_ead6076ad64ac676d6b8bef84b59c800
Size

189KB
MD5

ead6076ad64ac676d6b8bef84b59c800
SHA1

2f3c3614843ed70c449bfda3cf62842b5dec3ce7
SHA256

1de47f42c2d85a0eb65dc55acd6bfb7e07e541e9cd5badd1b78b65cd1f305013
SHA512

f55905b5a70dceb014eb2030d53696fc07e6ecfc39557e06e3134ee051d4aa2df47b441309d7011afbb7a25b1e99fb2979d9b04536571dc8b546a25022a59884
SSDEEP

3072:RVhb+Byo2fOkdD5n77pfdl2gNb9fngaLd/9FVbtCWTb85T8tU7Px:Q+OkddLlpBnp13Rg+U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_ead6076ad64ac676d6b8bef84b59c800

Files

VirusShare_ead6076ad64ac676d6b8bef84b59c800
.exe windows:5 windows x86 arch:x86

424b5af5064e4a6b8fbceddd9ce07ab7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateIconIndirect
EnumDesktopsW
SetWindowsHookW
GetClassInfoExA
CharUpperW
TranslateAcceleratorW

oledlg

ord9
OleUIPromptUserW
OleUIObjectPropertiesW
OleUIEditLinksW
OleUIChangeSourceW

kernel32

TlsGetValue
HeapSize
GetProcessHeap
SetEndOfFile
CreateFileW
LoadLibraryW
IsProcessorFeaturePresent
HeapReAlloc
ReadFile
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetStdHandle
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetLastError
GetFileType
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapFree
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
DeleteCriticalSection
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
LCMapStringW
MultiByteToWideChar
Sleep
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
ExitProcess
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteConsoleW
SetFilePointer
FlushFileBuffers
CreateFileA

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

424b5af5064e4a6b8fbceddd9ce07ab7

Headers

DLL Characteristics

File Characteristics

Imports

user32

oledlg

kernel32

Sections

.text Size: 77KB - Virtual size: 77KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 13KB - Virtual size: 142KB

.rsrc Size: 79KB - Virtual size: 78KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 77KB - Virtual size: 77KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 13KB - Virtual size: 142KB

.rsrc
Size: 79KB - Virtual size: 78KB

.reloc
Size: 4KB - Virtual size: 4KB