VirusShare_0dcdb939e8524ce89fdfb91a2e675e93 | Triage

Sharing

General

Target

VirusShare_0dcdb939e8524ce89fdfb91a2e675e93
Size

21KB
MD5

0dcdb939e8524ce89fdfb91a2e675e93
SHA1

a68934aed2b0a430dab8f7ef3a960218faebe583
SHA256

b7aefaf5b83cb8ad0dcb2a5b88d727e1375f54239c009a921a40145952d35573
SHA512

92626161d11c09c8b1fd97fd0ac5185ba981f75ea09b5f205fefbb00e3127ec14d47d28ec3da5f471005ce676cb78ce263e1ad16fc994749a8fb02587665daf1
SSDEEP

384:R4oZDeeumrKCZ1swbbVC2aJ2mO1yq314ZBfprXo0uLpRgMcBi8e/tmBciGN:R9Qe1sIbwOIq3GprXoTLpMeFIctN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_0dcdb939e8524ce89fdfb91a2e675e93

Files

VirusShare_0dcdb939e8524ce89fdfb91a2e675e93
.exe windows:4 windows x86 arch:x86

2385670ee7a532f7013c826d63479145

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
InitializeCriticalSection
LeaveCriticalSection
TerminateProcess
GetProcAddress
EnterCriticalSection
LoadLibraryA
lstrcmpiW
OutputDebugStringA
CreateThread
lstrcpyA
GetModuleHandleW
GetStartupInfoW

user32

GetActiveWindow
FindWindowA
OpenClipboard

wintrust

WinVerifyTrust

msvcrt

_adjust_fdiv
__p__commode
__setusermatherr
_initterm
_controlfp
_except_handler3
__wgetmainargs
__set_app_type
malloc
_exit
_XcptFilter
exit
_wcmdln
__p__fmode

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ