virussign[.]com_26a40eade629154d15e019603e4ce790 | Triage

Submit
Reports

Overview

overview

Static

static

virussign.dll

windows7-x64

virussign.dll

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

virussign.dll

Resource

win7-20220715-en

sality backdoor evasion trojan upx

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

virussign.dll

Resource

win10v2004-20220414-en

sality backdoor evasion trojan upx

windows10-2004-x64

14 signatures

150 seconds

General

Target

virussign.com_26a40eade629154d15e019603e4ce790
Size

120KB
MD5

26a40eade629154d15e019603e4ce790
SHA1

6823521b875fe13e6a607db7f868b4925a71eeeb
SHA256

c67d559821f7c3cca0adf73727e00cf193c8c9ed7c82876235335afb4768656f
SHA512

765373138bb0f70c7cf92f615274b0d45be29a1746e72af9e0c15820acb8b45604baa441f891384b9c77b12b211b17e88835de85c2bc351708394f4740762dae
SSDEEP

1536:x4hIFwuxh9ox1C8m2EyL3yCMXyP05mNwYeCf2yFWNbJdnKPEt:x4GM1CaH9hP05mNwucN/KPE

Score

N/A

Malware Config

Signatures

Files

virussign.com_26a40eade629154d15e019603e4ce790
.dll windows x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2024

Terms | Privacy