Static task
static1
Behavioral task
behavioral1
Sample
virussign.com_199eceb5314974db86f81aeef7cfc6b0.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
virussign.com_199eceb5314974db86f81aeef7cfc6b0.exe
Resource
win10v2004-20240508-en
General
-
Target
virussign.com_199eceb5314974db86f81aeef7cfc6b0.vir
-
Size
2.7MB
-
MD5
199eceb5314974db86f81aeef7cfc6b0
-
SHA1
c89bf3ad50d8a54748797784a8c5eb0205d9c4f7
-
SHA256
4cf41b700bfd861319ec71d08d292a1964448378e7a0a9c555e0c4f1d1b179f5
-
SHA512
9e6118396fd0fa892e33753d6fed18f1dc0c910d7dace844b56e898485336b7320c050410c3b1932688142e29d080025353dc5dd384a32028c11e0266a7962a5
-
SSDEEP
49152:jSAEItg/8FxN+gdHw2mUDlcjGA6Py9au5bP7i4VdAvx5hbY:2AEWM8FH+gdQ2melci7Py9au5vTm5K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource virussign.com_199eceb5314974db86f81aeef7cfc6b0.vir
Files
-
virussign.com_199eceb5314974db86f81aeef7cfc6b0.vir.exe windows:5 windows x86 arch:x86
093dea28bc1cff52109fd42907950774
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesW
GetFileTime
GetFileType
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetOverlappedResult
GetPrivateProfileIntW
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
GetProcessHeap
GetShortPathNameW
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTime
GetTempPathW
GetThreadContext
GetThreadPriority
GetTimeZoneInformation
GetVersionExA
GetVersionExW
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedDecrement
InterlockedExchangeAdd
InterlockedIncrement
IsValidCodePage
LCMapStringA
LCMapStringW
LoadLibraryExW
LoadResource
LocalAlloc
LocalFree
LockResource
lstrcpyW
lstrlenA
MapViewOfFile
MoveFileExW
MulDiv
GetEnvironmentVariableW
OpenFileMappingW
OpenProcess
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReadProcessMemory
ReleaseMutex
RemoveDirectoryW
ResetEvent
ResumeThread
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetFileAttributesW
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetEnvironmentStrings
UnhandledExceptionFilter
GetVersion
RtlUnwind
GetEnvironmentVariableA
GetEnvironmentStringsW
GetDriveTypeW
GetDiskFreeSpaceExW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetCPInfo
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetComputerNameW
GetCommandLineW
GetACP
FreeResource
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitProcess
DuplicateHandle
DisconnectNamedPipe
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessW
CreatePipe
CreateNamedPipeW
CreateMutexW
CreateFileW
CreateFileMappingW
CreateFileA
GetSystemTimeAsFileTime
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
LoadLibraryW
user32
GetScrollInfo
GetSubMenu
GetSysColorBrush
GetSystemMetrics
GetUpdateRect
GetWindowDC
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
InflateRect
InsertMenuItemW
InsertMenuW
InvalidateRect
InvalidateRgn
IsCharAlphaW
IsClipboardFormatAvailable
IsDialogMessageW
IsDlgButtonChecked
IsIconic
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
keybd_event
KillTimer
LoadCursorW
LoadIconW
LoadImageW
LoadStringW
MapDialogRect
MapVirtualKeyW
MapWindowPoints
MessageBoxW
ModifyMenuW
MoveWindow
MsgWaitForMultipleObjectsEx
OffsetRect
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
ScrollWindowEx
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetClassLongW
SetClipboardData
SetCursor
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenuDefaultItem
SetMenuItemBitmaps
SetMenuItemInfoW
SetPropW
SetScrollInfo
GetPropW
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowsHookExW
SetWindowTextW
ShowScrollBar
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UpdateWindow
ValidateRect
VkKeyScanW
WaitForInputIdle
WindowFromDC
WindowFromPoint
wsprintfW
GetMenuItemInfoW
GetMenuItemCount
GetKeyNameTextW
GetKeyboardState
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItemTextW
GetDlgItemInt
GetDlgCtrlID
GetDialogBaseUnits
GetDesktopWindow
GetDC
GetCursor
GetClipboardData
GetClientRect
GetClassNameW
GetClassNameA
GetClassInfoW
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowW
FindWindowExW
FillRect
EqualRect
EnumWindows
EnumDisplaySettingsW
EnumChildWindows
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawStateW
DrawIconEx
DrawFocusRect
DrawEdge
DispatchMessageW
DialogBoxParamW
DialogBoxIndirectParamW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
CreateWindowExW
GetPriorityClipboardFormat
GetParent
GetNextDlgGroupItem
GetMessageW
SetTimer
GetMessageExtraInfo
CreatePopupMenu
CreateIconIndirect
CreateDialogParamW
CreateDialogIndirectParamW
CountClipboardFormats
CopyImage
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
GetKeyState
GetKeyboardLayout
EnumThreadWindows
gdi32
CreateRectRgn
CreateSolidBrush
DeleteDC
EndDoc
EndPage
EnumFontFamiliesExW
ExtTextOutW
FillRgn
GetBitmapBits
GetBkMode
GetClipBox
GetCurrentObject
GetDeviceCaps
GetDIBits
GetFontData
GetGlyphOutlineW
GetObjectA
GetObjectW
GetOutlineTextMetricsW
GetStockObject
GetTextAlign
GetTextCharset
GetTextExtentPoint32W
GetTextMetricsA
GetTextMetricsW
GetViewportExtEx
GetWindowExtEx
LineTo
MoveToEx
Polygon
PolyPolyline
SelectObject
SetBitmapBits
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBits
SetDIBitsToDevice
SetPixel
SetStretchBltMode
SetTextAlign
SetTextColor
SetViewportExtEx
SetWindowExtEx
StartDocW
StartPage
StretchBlt
TextOutW
CreateRectRgnIndirect
shell32
ShellExecuteW
ShellExecuteExW
ShellExecuteA
Shell_NotifyIconW
SHEmptyRecycleBinW
Sections
.text Size: 756KB - Virtual size: 754KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_set_5 Size: 799KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE