ArtRage Vitae[.]exe

General

Target
ArtRage Vitae.exe
Size 133.4MB
Sample260804-a2df1sac34
SHA256 a6c50d725b1218ecb12566d473528dfaa13a97ef4afffd83fb34c5513b9ece3a
MD5 23a72e703ce07778b04d83957682692e
SHA1 e28da601df52581a9a17c31e55fcb20804702d9d
SHA512 da17dbc740b7dcd9e5966af7ffaa16982109cc722855d31fbf2a9f43620de6045f58e973515b21fa002291bc7c90c3d01fde42c31685ac4a9937f3e5d9d20142
SSDEEP 3145728:sdwcGPpn6Kajp87wGQ9jc3U0sQMVYlwS21C:zV1au7z4o3U0+VYZ
TLSH
T1D9683330729BC93BD07A05B16A6E9BEE41547E750B3240C3F3D85EAE69F54D21232E27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ArtRage Vitae.exe

File Explorer

ArtRage Vitae.exe

.exe 133.4MB

ArtRage Vitae.exe

IMPHASH 0ab020de3096b6aafb4fadfac4d16825
SHA256 a6c50d725b1218ecb12566d473528dfaa13a97ef4afffd83fb34c5513b9ece3a
MD5 23a72e703ce07778b04d83957682692e
SHA1 e28da601df52581a9a17c31e55fcb20804702d9d
SHA512 da17dbc740b7dcd9e5966af7ffaa16982109cc722855d31fbf2a9f43620de6045f58e973515b21fa002291bc7c90c3d01fde42c31685ac4a9937f3e5d9d20142
SSDEEP 3145728:sdwcGPpn6Kajp87wGQ9jc3U0sQMVYlwS21C:zV1au7z4o3U0+VYZ
TLSH
T1D9683330729BC93BD07A05B16A6E9BEE41547E750B3240C3F3D85EAE69F54D21232E27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1239649

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\JobRelease\win\Release\stubs\x86\ExternalUi.pdb

kernel32

CreateFileW CloseHandle WriteFile DeleteFileW HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap SizeofResource LockResource LoadResource FindResourceW FindResourceExW RemoveDirectoryW GetTempPathW GetTempFileNameW CreateDirectoryW MoveFileW GetLastError EnterCriticalSection LeaveCriticalSection GetModuleFileNameW DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetCurrentThreadId RaiseException SetLastError GlobalUnlock GlobalLock GlobalAlloc MulDiv lstrcmpW CreateEventW SetEvent InitializeCriticalSection lstrcpynW WaitForSingleObject CreateThread GetProcAddress LoadLibraryExW DecodePointer Sleep GetDiskFreeSpaceExW GetExitCodeThread GetCurrentProcessId FreeLibrary GetSystemDirectoryW lstrlenW VerifyVersionInfoW VerSetConditionMask lstrcmpiW GetModuleHandleW LoadLibraryW GetDriveTypeW CompareStringW FindFirstFileW FindNextFileW GetLogicalDriveStringsW GetFileSize GetFileAttributesW GetShortPathNameW SetFileAttributesW GetFileTime CopyFileW ReadFile SetFilePointer SystemTimeToFileTime FindClose MultiByteToWideChar WideCharToMultiByte GetCurrentProcess GetSystemInfo WaitForMultipleObjects ReadConsoleW VirtualProtect VirtualQuery LoadLibraryExA GetStringTypeW SetUnhandledExceptionFilter FileTimeToSystemTime GetEnvironmentVariableW GetEnvironmentStringsW FormatMessageW LocalFree InitializeCriticalSectionEx LoadLibraryA GetModuleFileNameA GetFullPathNameW GetCurrentThread GetConsoleOutputCP FlushFileBuffers SetConsoleTextAttribute GetStdHandle GetConsoleScreenBufferInfo OutputDebugStringW CreateProcessW GetExitCodeProcess GetTickCount GetCommandLineW SetCurrentDirectoryW SetEndOfFile EnumResourceLanguagesW GetLocaleInfoW GetSystemDefaultLangID GetUserDefaultLangID GetWindowsDirectoryW GetSystemTime GetDateFormatW GetTimeFormatW CreateToolhelp32Snapshot Process32FirstW Process32NextW ResetEvent GlobalFree GetPrivateProfileStringW GetPrivateProfileSectionNamesW WritePrivateProfileStringW GetLocalTime CreateNamedPipeW ConnectNamedPipe Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection IsWow64Process TerminateThread LocalAlloc CompareFileTime CopyFileExW OpenEventW PeekNamedPipe IsDebuggerPresent EncodePointer InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree QueryPerformanceCounter QueryPerformanceFrequency LCMapStringEx GetSystemTimeAsFileTime CompareStringEx GetCPInfo WaitForSingleObjectEx UnhandledExceptionFilter TerminateProcess GetStartupInfoW RtlUnwind TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW GetFileType GetTimeZoneInformation LCMapStringW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleMode IsValidCodePage GetACP GetOEMCP GetFileSizeEx SetFilePointerEx FindFirstFileExW GetCommandLineA FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle WriteConsoleW

Sharing