virussign[.]com_749826a1c35260c3ebcd5adcc59cefb0[.]vir

Sharing

Copy URL Twitter E-mail

General

Target

virussign.com_749826a1c35260c3ebcd5adcc59cefb0.vir
Size

512KB
MD5

749826a1c35260c3ebcd5adcc59cefb0
SHA1

1a6773e993caa72110971207798544bde8be371d
SHA256

589fda279b009c4d08e1536bee09d3f3ca00c0b5792266e4ddb65c2baec6fe1f
SHA512

df08e6688bffc8e144b3e0829dc30f83435ddf4ea78ab2394d14da90b1653739998a47496e400679d61a56f28ee877cb62c0f67565a3b89a3a57fe7ba8159c73
SSDEEP

12288:P0cmOmRcIAHiNF0HfLcvQScGHtTNpbAzB:QczHiNFkob9TS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_749826a1c35260c3ebcd5adcc59cefb0.vir

Files

virussign.com_749826a1c35260c3ebcd5adcc59cefb0.vir
.exe windows:4 windows x86 arch:x86

84b407f5c66616ec1bb4b1c55dd6ae29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Projects\PersonalityCardWriter\Builds\Release\PersonalityCardWriter.pdb

Imports

kernel32

HeapSize
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
GetConsoleCP
GetConsoleMode
SetStdHandle
CreateFileA
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
HeapReAlloc
RaiseException
RtlUnwind
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
FindResourceExW
lstrlenA
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
SetErrorMode
GetModuleHandleA
VirtualProtect
SetFileAttributesW
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetVersionExW
GetDiskFreeSpaceW
GetTempFileNameW
GetFileTime
SetFileTime
GetFileAttributesW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetTickCount
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GlobalFree
GlobalAlloc
FormatMessageW
LocalFree
MulDiv
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
FreeLibrary
InterlockedDecrement
FreeResource
GetCurrentThreadId
GetVersion
GlobalLock
GlobalUnlock
GetCurrentProcessId
GlobalGetAtomNameW
GlobalAddAtomW
WideCharToMultiByte
CreateFileW
GetModuleFileNameW
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
CloseHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
lstrlenW
GetThreadLocale
GetStringTypeExW
DeleteFileW
MoveFileW
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
SetLastError
GetCurrentDirectoryW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
Sleep
SizeofResource

user32

SetRect
GetDCEx
LockWindowUpdate
UnregisterClassW
PostThreadMessageW
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
DestroyIcon
KillTimer
SetTimer
SetWindowRgn
DrawIcon
FillRect
FindWindowW
ShowOwnedPopups
ValidateRect
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatW
PostQuitMessage
InsertMenuW
MoveWindow
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
MessageBoxW
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
SetScrollInfo
DefWindowProcW
CallWindowProcW
SystemParametersInfoA
GetWindowPlacement
UnhookWindowsHookEx
GetMenuStringW
SystemParametersInfoW
GetMenuItemInfoW
InflateRect
BeginDeferWindowPos
EndDeferWindowPos
SetParent
GetClientRect
GetSystemMenu
AppendMenuW
DeleteMenu
IsRectEmpty
PtInRect
GetDC
ReleaseDC
IsZoomed
WaitMessage
GetMessageW
DispatchMessageW
TranslateMessage
GetCursorPos
LoadCursorW
WindowFromPoint
SetCapture
ScreenToClient
ClientToScreen
RegisterWindowMessageW
UnpackDDElParam
ReuseDDElParam
LoadMenuW
DestroyMenu
GetClassNameW
GetSysColor
WinHelpW
SetWindowPos
SetFocus
GetWindowThreadProcessId
GetActiveWindow
IsWindowEnabled
GetFocus
EqualRect
GetDlgItem
SetWindowLongW
GetKeyState
GetDlgCtrlID
LoadIconW
SetCursor
PeekMessageW
GetCapture
ReleaseCapture
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
LoadAcceleratorsW
GetParent
DrawTextW
TabbedTextOutW
GetScrollRange
GetAsyncKeyState
SetActiveWindow
IsWindowVisible
IsIconic
InsertMenuItemW
GetMenuItemID
GetMenuItemCount
CreatePopupMenu
GetClassInfoW
IntersectRect
OffsetRect
SetRectEmpty
CopyRect
GetLastActivePopup
BringWindowToTop
SetMenu
GetDesktopWindow
GetWindow
ShowWindow
GetWindowLongW
IsWindow
TranslateAcceleratorW
CharUpperW
GetSystemMetrics
LoadBitmapW
GetWindowRect
EnableWindow
UpdateWindow
InvalidateRect
SendMessageW
EnableMenuItem
GetSubMenu
GetMenu
PostMessageW
GetScrollInfo
UnregisterClassA

gdi32

TextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
GetStockObject
RectVisible
CreateSolidBrush
SetRectRgn
CombineRgn
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
EnumFontFamiliesExW
IntersectClipRect
ExcludeClipRect
SetMapMode
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
CreateFontW
SetBkMode
RestoreDC
SaveDC
PatBlt
CreateRectRgnIndirect
Ellipse
LPtoDP
CreateEllipticRgn
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
ExtTextOutW
BitBlt
CreateFontIndirectW
StretchDIBits
DeleteDC
GetObjectW
GetCharWidthW
DeleteObject
GetTextExtentPoint32W
GetTextMetricsW
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegDeleteValueW
RegCreateKeyW
GetFileSecurityW
SetFileSecurityW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueW
RegOpenKeyW
RegCloseKey

shell32

SHGetFileInfoW
DragFinish
DragQueryFileW
ExtractIconW
DragAcceptFiles

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCW
PathFindExtensionW
PathRemoveExtensionW
PathStripToRootW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleFlushClipboard
CoTaskMemAlloc
CoTaskMemFree
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysFreeString
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen

Sections

.text
Size: 340KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

84b407f5c66616ec1bb4b1c55dd6ae29

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 340KB - Virtual size: 340KB

.rdata Size: 88KB - Virtual size: 87KB

.data Size: 16KB - Virtual size: 28KB

.rsrc Size: 64KB - Virtual size: 64KB

.text
Size: 340KB - Virtual size: 340KB

.rdata
Size: 88KB - Virtual size: 87KB

.data
Size: 16KB - Virtual size: 28KB

.rsrc
Size: 64KB - Virtual size: 64KB