virtas[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
virtas.exe
Size 524KB
Sample260723-w22phahn4y
SHA256 3022e8908eec757622fc7b5c9f0c784caf00baa1b478938367a9804e348a258b
MD5 6e7d2e2e939415566f78364b1a4ff925
SHA1 8940da1f43ac7d904814a1d46aef59017663aef2
SHA512 e3f544970ece76136a2a9fadb0dfdc959b5f75db5324cf0be20eaebcfd550666836050ffa9580015288f38b5ebfdc334ea8ceb5c9fbd9f41748c82ba7947c518
SSDEEP 6144:mOELFIUEN1EuS+m4T4MSrOG8NfA/6kytjS2bc//prAmJE9469PevI1LfHocz19H:1quHSrTl0tJir3sMI9fHocZ5
TLSH
T14BB4CF21F5C0DC33D19F01325C7AD618A3BA65A48675424F3BB4EE9D7AFB142A51AF03
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virtas.exe

File Explorer

virtas.exe

.exe 524KB

virtas.exe

IMPHASH c15b639285873ce3dfd881ff2dd1f157
SHA256 3022e8908eec757622fc7b5c9f0c784caf00baa1b478938367a9804e348a258b
MD5 6e7d2e2e939415566f78364b1a4ff925
SHA1 8940da1f43ac7d904814a1d46aef59017663aef2
SHA512 e3f544970ece76136a2a9fadb0dfdc959b5f75db5324cf0be20eaebcfd550666836050ffa9580015288f38b5ebfdc334ea8ceb5c9fbd9f41748c82ba7947c518
SSDEEP 6144:mOELFIUEN1EuS+m4T4MSrOG8NfA/6kytjS2bc//prAmJE9469PevI1LfHocz19H:1quHSrTl0tJir3sMI9fHocZ5
TLSH
T14BB4CF21F5C0DC33D19F01325C7AD618A3BA65A48675424F3BB4EE9D7AFB142A51AF03
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

176374

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

x:\nata\fifth\fifth\fifth.pdb

kernel32

GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA Sleep LCMapStringW LCMapStringA GetStringTypeA GetStringTypeW GetConsoleMode SetStdHandle GetModuleHandleA GetConsoleOutputCP WriteConsoleW GetProcAddress SetLastError GetCPInfo lstrlenW CompareStringA MulDiv CreateEventA WaitForSingleObject GetLocalTime GetConsoleWindow VirtualAlloc GetPriorityClass GlobalAlloc GetFileAttributesA GetCurrentThread GetCurrentProcess GetWindowsDirectoryA FreeLibrary lstrcatA WinExec lstrcpyA CreateFileA WriteFile CloseHandle IsValidCodePage GetACP LoadLibraryA lstrlenA lstrcmpiA GetVersionExA GetVersion FindResourceA LoadResource LockResource SizeofResource GetLastError WideCharToMultiByte GetStdHandle HeapCreate HeapDestroy VirtualFree HeapSize ExitProcess GetStartupInfoA GetProcessHeap GetCommandLineA RaiseException IsDebuggerPresent SetUnhandledExceptionFilter GetConsoleCP UnhandledExceptionFilter TerminateProcess HeapReAlloc RtlUnwind HeapFree HeapAlloc MultiByteToWideChar WriteConsoleA InterlockedExchange SetErrorMode LocalFree FormatMessageA GlobalUnlock GlobalLock GlobalFree GetModuleFileNameW InterlockedDecrement GetCurrentThreadId lstrcmpW GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA FreeResource lstrcmpA GetModuleFileNameA GetCurrentProcessId GetLocaleInfoA EnumResourceLanguagesA ConvertDefaultLocale GlobalFlags LocalAlloc LeaveCriticalSection TlsGetValue EnterCriticalSection GlobalReAlloc GlobalHandle InitializeCriticalSection TlsAlloc TlsSetValue LocalReAlloc DeleteCriticalSection TlsFree InterlockedIncrement GetOEMCP GetThreadLocale WritePrivateProfileStringA ReadFile SetFilePointer FlushFileBuffers

user32

SetWindowLongA LoadCursorA CopyIcon IsWindow GetMessagePos DestroyMenu GetMenuStringA UnhookWindowsHookEx ValidateRect PeekMessageA GetKeyState IsWindowVisible DispatchMessageA TranslateMessage GetMessageA CallNextHookEx SetWindowsHookExA BeginPaint EndPaint GetWindow GetWindowPlacement IsIconic IntersectRect SetWindowPos CallWindowProcA DefWindowProcA GetDlgCtrlID DeferWindowPos EqualRect AdjustWindowRectEx RegisterClassA GetClassInfoA GetClassInfoExA MessageBoxA GetMenu UpdateWindow SetForegroundWindow MapWindowPoints GetMessageTime GetTopWindow SetActiveWindow GetLastActivePopup GetForegroundWindow SetFocus GetFocus RemovePropA GetPropA SetPropA GetClassNameA GetClassLongA GetCapture IsChild WinHelpA SendDlgItemMessageA RegisterWindowMessageA SetRectEmpty CheckMenuItem GetMenuCheckMarkDimensions SetMenuItemBitmaps IsDialogMessageA MoveWindow ShowWindow DrawIcon CreateDialogIndirectParamA PostQuitMessage UnregisterClassA MessageBeep ReleaseCapture GetDCEx LockWindowUpdate SetCapture SetParent KillTimer SetTimer ScreenToClient PtInRect EnableMenuItem LoadIconA DestroyCursor GetIconInfo CreateIconIndirect SetCursor IsMenu GetWindowLongA WindowFromPoint GetParent GetNextDlgTabItem GetActiveWindow ClientToScreen SendMessageA DrawFocusRect FrameRect OffsetRect InflateRect DrawStateA LoadImageA GetWindowDC SetWindowRgn InvalidateRect GetClientRect GetWindowRect PostMessageA GetMenuItemInfoA GetSystemMetrics SystemParametersInfoA DrawIconEx DestroyIcon GrayStringA DrawTextExA DrawTextA TabbedTextOutA GetSysColorBrush GetSysColor EnableWindow GetDesktopWindow ReleaseDC GetDC RemoveMenu ModifyMenuA InsertMenuA GetSubMenu GetMenuState GetMenuItemID GetMenuItemCount AppendMenuA GetSystemMenu SetWindowTextA EndDeferWindowPos TrackPopupMenu SendInput DeleteMenu CreatePopupMenu CreateMenu DrawEdge FillRect LoadBitmapA CopyRect SetRect DialogBoxParamA SetDlgItemTextA GetWindowTextA GetWindowTextLengthA LoadMenuA IsWindowEnabled GetDlgItem RegisterClassExA EnumDisplayMonitors GetWindowThreadProcessId FindWindowA TranslateAcceleratorA DestroyWindow GetCursorPos GetAncestor CreateWindowExA EndDialog

gdi32

RoundRect GetCurrentObject GetTextCharsetInfo SetMapMode SetTextJustification SetStretchBltMode SetAbortProc SetWindowExtEx CreateBitmap SetBkColor SetTextColor GetStockObject CreateRectRgn CombineRgn GetDIBits StretchBlt GetBkColor GetTextExtentPoint32W Escape ExtTextOutA TextOutA RectVisible PtVisible CreateDIBSection SelectObject DeleteObject DeleteDC SetRectRgn CreateRectRgnIndirect StretchDIBits CreateFontA GetCharWidthA CreatePatternBrush ScaleWindowExtEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectClipRgn MoveToEx LineTo IntersectClipRect ExcludeClipRect GetClipBox SetBkMode RestoreDC SaveDC GetTextExtentPoint32A SetPixel GetPixel BitBlt PatBlt Rectangle Ellipse GetBkMode GetDeviceCaps CreateCompatibleDC GetObjectA CreateCompatibleBitmap CreateFontIndirectA CreateHatchBrush CreateSolidBrush CreatePen

comdlg32

ChooseColorA

advapi32

RegQueryValueExA OpenThreadToken OpenProcessToken GetTokenInformation AllocateAndInitializeSid EqualSid FreeSid RegQueryValueA RegOpenKeyExA RegCloseKey RegSetValueExA RegOpenKeyA RegDeleteKeyA RegEnumKeyA RegCreateKeyExA

shell32

SHGetFileInfoW SHGetDesktopFolder ShellExecuteExA ShellExecuteA

ole32

CreateFileMoniker RevokeDragDrop CoLockObjectExternal

oleaut32

VariantChangeType SystemTimeToVariantTime VarR8FromI4 VarR8FromR4 SysAllocStringLen VariantInit VariantClear

msimg32

GradientFill

comctl32

ImageList_GetIconSize _TrackMouseEvent

shlwapi

PathFindExtensionA PathFindFileNameA

winmm

mmioAscend SendDriverMessage PlaySoundA

avifil32

AVIStreamGetFrameOpen AVIMakeCompressedStream

iphlpapi

GetIpStatistics GetNetworkParams GetNumberOfInterfaces

pdh

PdhOpenQueryA

rpcrt4

UuidToStringW UuidToStringA RpcStringFreeA UuidCreate

rasapi32

RasGetConnectionStatistics

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA