VirusShare_0dd6e1d0614377f4e444d624b840febd

General

Target

VirusShare_0dd6e1d0614377f4e444d624b840febd
Size

16KB
MD5

0dd6e1d0614377f4e444d624b840febd
SHA1

e9d9eba5d8d4d73a7ab614b37ffac4c24f8bf59a
SHA256

b06e3cbc6f4ae6278cd7f93ea83cf09996c75a2584866b60e0d1b9f567d360b3
SHA512

a652cf34dc5905d61de7a7d562f6483868ff4c8dcac4413eaecfe0120547801fde88b33c9ac203f0f7450af8cc6419919fa7bf8ffcfbec108f9e1f2cdccf01f4
SSDEEP

192:IBMCWVkFVu4+wfkbe1zIDsCZ9cZuMsHctKw7q+t0PtRuvzuP:IBGVkywj1zwsCZehs+P7znvu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_0dd6e1d0614377f4e444d624b840febd

Files

VirusShare_0dd6e1d0614377f4e444d624b840febd
.exe windows:4 windows x86 arch:x86

9fb349155e0a4bb9178859380501f286

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExA
PeekMessageA
SendMessageA
LoadCursorA
GetSystemMetrics
GetMessageA
GetDlgItemTextA
EndPaint
TranslateMessage
UpdateWindow
MessageBoxA
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint

kernel32

CloseHandle
CopyFileA
CreateFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FreeResource
GetCommandLineA
GetEnvironmentVariableA
GetFileSize
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetTempPathA
GlobalFree
HeapAlloc
LoadResource
LockResource
MoveFileA
ReadFile
RtlMoveMemory
SetErrorMode
SetFilePointer
SizeofResource
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

advapi32

RegCreateKeyExA
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
RegSetValueExA
RegDeleteKeyA
CryptAcquireContextA
RegCloseKey
CryptReleaseContext
CryptHashData

shlwapi

PathFindFileNameA
PathFindExtensionA
PathMatchSpecA

gdi32

CreateFontIndirectA

comctl32

InitCommonControls

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9fb349155e0a4bb9178859380501f286

Headers

File Characteristics

Imports

user32

kernel32

shell32

advapi32

shlwapi

gdi32

comctl32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 11KB

.rsrc Size: 265KB - Virtual size: 265KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 11KB

.rsrc
Size: 265KB - Virtual size: 265KB