virussign[.]com_d8cc76df2a3e20314ec2a8d91f69e9d0

General

Target
virussign.com_d8cc76df2a3e20314ec2a8d91f69e9d0
Size 456KB
Sample220715-v264jsdbd7
SHA256 df220d6e6d61d0cbad830bc74e1767a09285cbd009803e8af25ddf2901fb21c8
MD5 d8cc76df2a3e20314ec2a8d91f69e9d0
SHA1 d339f3ca55dd7408b2dd13b26b0b950e18c62abe
SHA512 ebeafe55ea291b1529d173190cdbb2daefd1643d5ba8c06533513d326330974975f854f1ca17a827d68e52e2237ad8e26520078bfc1bae04cb87a084a2a6305e
SSDEEP 6144:zJB0PLonpe1h5nxJ48INpUubY3DNtjKh2ClmoyZ07rJi6dSM1twTrmRGwY8kh0+T:zJB0lh7r6bIj22CAoyerJVbtqeY89bsz
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

virussign.com_d8cc76df2a3e20314ec2a8d91f69e9d0

.exe 456KB

virussign.com_d8cc76df2a3e20314ec2a8d91f69e9d0

IMPHASH 58471b8a9f8702d1a9e4838d7b7d501a
SHA256 df220d6e6d61d0cbad830bc74e1767a09285cbd009803e8af25ddf2901fb21c8
MD5 d8cc76df2a3e20314ec2a8d91f69e9d0
SHA1 d339f3ca55dd7408b2dd13b26b0b950e18c62abe
SHA512 ebeafe55ea291b1529d173190cdbb2daefd1643d5ba8c06533513d326330974975f854f1ca17a827d68e52e2237ad8e26520078bfc1bae04cb87a084a2a6305e
SSDEEP 6144:zJB0PLonpe1h5nxJ48INpUubY3DNtjKh2ClmoyZ07rJi6dSM1twTrmRGwY8kh0+T:zJB0lh7r6bIj22CAoyerJVbtqeY89bsz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

5064

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysFreeString SysAllocStringLen SysAllocStringByteLen SysStringLen

user32

LoadStringW WaitMessage

kernel32

GetProcAddress VirtualAlloc VirtualProtect GetStartupInfoW RtlMoveMemory WideCharToMultiByte SetFileApisToOEM GetModuleHandleW SetFileApisToANSI GetUserDefaultLCID

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaVarIdiv __vbaFreeVarList _adj_fdiv_m64 __vbaVarFix _adj_fprem1 __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaVarForInit __vbaVarPow __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i ord706 __vbaBoolVarNull _CIsin __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaVarOr __vbaRedimPreserve _adj_fpatan __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaVarMul __vbaExceptHandler _adj_fprem _adj_fdivr_m64 __vbaVarDiv __vbaFPException __vbaUbound __vbaStrVarVal _CIlog __vbaErrorOverflow __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaFreeStrList _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord100 __vbaI4Var __vbaVarCmpEq __vbaAryLock __vbaVarAdd _CIatan __vbaStrMove _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing