Static task
static1
Behavioral task
behavioral1
Sample
virussign.com_4920188e15303e445f0f2228f8c800a0.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
virussign.com_4920188e15303e445f0f2228f8c800a0.exe
Resource
win10v2004-20240508-en
General
-
Target
virussign.com_4920188e15303e445f0f2228f8c800a0.vir
-
Size
7.1MB
-
MD5
4920188e15303e445f0f2228f8c800a0
-
SHA1
68a27168eb16b33be8bed9f46b3fea73d1443d19
-
SHA256
46a14af42381c8c0b6673643c281d77a9f4ebcbc84ff06bd938a6f2404d67811
-
SHA512
81246ef58f7eaab08674a8f84b00e56eef138db495593956216a508f3de13efd1398cf9a89eb0f746d04e4f0b180e393f02c88b81d71f4db6e87c54e53d5ff60
-
SSDEEP
196608:UEQmh8LU9AT8EZ2LcI23UjDh+azIhje2fq6ZD:UAg8zcODGv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource virussign.com_4920188e15303e445f0f2228f8c800a0.vir
Files
-
virussign.com_4920188e15303e445f0f2228f8c800a0.vir.exe windows:4 windows x86 arch:x86
d973833532e31495ae8c748b551854da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
lstrcpynA
GetSystemDirectoryA
GetModuleFileNameA
GetEnvironmentVariableA
LockResource
LoadResource
GetWindowsDirectoryA
GetDriveTypeA
GetFileAttributesA
CreateProcessA
CompareStringA
GetTempPathA
FindNextFileA
DeleteFileA
LoadLibraryA
FreeLibrary
ExitProcess
CreateFileA
ReadFile
SetFilePointer
Sleep
lstrlenA
GetDiskFreeSpaceA
FindFirstFileA
SetFileAttributesA
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
lstrcatA
CreateDirectoryA
GetLastError
lstrcpyA
CloseHandle
WriteFile
GetStartupInfoA
RemoveDirectoryA
FindResourceA
WaitForSingleObject
SetStdHandle
RtlUnwind
GetFileType
GetProcAddress
SetHandleCount
GetOEMCP
FlushFileBuffers
FindClose
GetStdHandle
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LCMapStringW
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetModuleHandleA
HeapFree
HeapAlloc
user32
MessageBoxA
wsprintfA
GetClassNameA
DispatchMessageA
PeekMessageA
TranslateMessage
DialogBoxParamA
GetWindow
GetSysColor
MessageBeep
LoadStringA
SetWindowPos
MapWindowPoints
GetClientRect
SystemParametersInfoA
GetWindowRect
GetParent
GetWindowLongA
SendMessageA
CreateWindowExA
GetDesktopWindow
GetDlgItemTextA
KillTimer
EnableWindow
SetTimer
GetWindowTextA
PostMessageA
SetFocus
CreateDialogParamA
DestroyWindow
GetDlgItem
SetDlgItemTextA
ScreenToClient
GetDC
ReleaseDC
SendDlgItemMessageA
SetWindowLongA
EndDialog
LoadBitmapA
SetWindowTextA
gdi32
DeleteObject
SetTextColor
SelectObject
SetBkMode
GetTextExtentPointA
DeleteDC
BitBlt
CreateBitmap
CreateCompatibleBitmap
SetBkColor
GetObjectA
CreateCompatibleDC
CreateFontIndirectA
TextOutA
comctl32
ord17
PropertySheetA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_cabinet Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ