Static task
static1
Behavioral task
behavioral1
Sample
virussign.com_5d14ef9b22945fbe68763e40b87ad0b0.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
virussign.com_5d14ef9b22945fbe68763e40b87ad0b0.exe
Resource
win10v2004-20240426-en
General
-
Target
virussign.com_5d14ef9b22945fbe68763e40b87ad0b0.vir
-
Size
83KB
-
MD5
5d14ef9b22945fbe68763e40b87ad0b0
-
SHA1
7fa17e1482fbe97c09cdc203c9258b5f50d93df6
-
SHA256
b8a811bf6a66692091f97e4c656f4e61f2323cc830857838c0677f1e1a060485
-
SHA512
afe4820b2db925690db60d9155dd4b058b12dad7fd1298f14e795927cbe5cc7fe79f88cff3c945001fd7ad64ba3b71975aa4bca3d9710da78e15d91e2db47b5e
-
SSDEEP
1536:Rlrq8Ot5qWDxYZcVSYyHCOs1iZ3ksNsgO4nuqaSEBLMDJgWgUAb/:G8Ot5daZcVSYyiOs1iS+O6uq2BLMDJgn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource virussign.com_5d14ef9b22945fbe68763e40b87ad0b0.vir
Files
-
virussign.com_5d14ef9b22945fbe68763e40b87ad0b0.vir.exe windows:1 windows x86 arch:x86
6a790ebe8e1083778f6c5412587e23f7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateThread
lstrcatA
SetFileAttributesA
SetFileTime
CreateFileA
GetFileTime
GetFileAttributesA
CopyFileA
GlobalAddAtomA
lstrcmpA
LocalFree
LocalUnlock
LocalHandle
FindFirstFileA
LocalLock
LocalAlloc
DeleteFileA
GetFileSize
CreateThread
CloseHandle
DeleteCriticalSection
GetPrivateProfileStringA
GetCurrentThreadId
WritePrivateProfileStringA
WriteProfileStringA
GetModuleHandleA
GetProfileStringA
GetTempPathA
GetTickCount
lstrcpyA
_lwrite
GetTempFileNameA
OpenFile
EnterCriticalSection
_lclose
lstrcmpiA
FindClose
FindNextFileA
LeaveCriticalSection
GetModuleFileNameA
ExitProcess
FlushFileBuffers
OutputDebugStringA
ReadFile
GetProcAddress
SetStdHandle
SetFilePointer
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
VirtualFree
WriteFile
GlobalHandle
GetStdHandle
UnhandledExceptionFilter
RtlUnwind
GetCPInfo
GetOEMCP
GetACP
GetVersion
lstrlenA
InitializeCriticalSection
GetFileType
GetCommandLineA
GetStartupInfoA
CreateDirectoryA
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalFree
GetEnvironmentStrings
GetLogicalDrives
GetLastError
_llseek
_lread
MulDiv
GetCurrentDirectoryA
GetFullPathNameA
user32
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
RegisterClassA
GetWindowPlacement
IsZoomed
DefWindowProcA
InvalidateRect
DestroyWindow
SetForegroundWindow
SetActiveWindow
EnableMenuItem
UpdateWindow
SetWindowTextA
GetMenu
FindWindowA
PostMessageA
MoveWindow
CreateWindowExA
RegisterWindowMessageA
LoadAcceleratorsA
SetWindowPlacement
GetClientRect
ShowWindow
LoadIconA
ReleaseDC
GetDC
RedrawWindow
GetWindowLongA
SetWindowLongA
GetParent
PtInRect
ReleaseCapture
SetCapture
EndPaint
DrawTextA
BeginPaint
SetScrollRange
SetScrollPos
ScrollWindow
GetKeyState
EnableWindow
CreateDialogParamA
PeekMessageA
IsDialogMessageA
FillRect
DrawFocusRect
InvertRect
GetDesktopWindow
AttachThreadInput
LoadStringA
CharLowerBuffA
CheckDlgButton
CheckRadioButton
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItemTextA
EndDialog
LoadCursorA
SetCursor
DialogBoxParamA
MessageBoxA
SendMessageA
wsprintfA
PostQuitMessage
SetFocus
gdi32
SetTextColor
StartPage
GetStockObject
EndPage
ExtTextOutA
GetTextMetricsA
SetROP2
SetBkColor
GetDeviceCaps
SelectObject
CreateSolidBrush
DeleteObject
CreatePen
LineTo
MoveToEx
Rectangle
DeleteDC
EndDoc
GetTextExtentPointA
StartDocA
SetAbortProc
AbortDoc
comdlg32
GetOpenFileNameA
PrintDlgA
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ