virussign[.]com_6366eaad7fbe650aa346862be63f0860 | Triage

Submit
Reports

Overview

overview

Static

static

virussign.dll

windows7-x64

virussign.dll

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

virussign.dll

Resource

win7-20220414-en

sality backdoor evasion trojan upx

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

virussign.dll

Resource

win10v2004-20220414-en

sality backdoor evasion trojan upx

windows10-2004-x64

15 signatures

150 seconds

General

Target

virussign.com_6366eaad7fbe650aa346862be63f0860
Size

120KB
MD5

6366eaad7fbe650aa346862be63f0860
SHA1

fe6ead8133f20792b21788013770e10843c7dd8f
SHA256

2e7df1ce70cea4fbc38cebe86cbb7e3b1ef038c9f69f099406164c0ace977225
SHA512

1bf599648126446a581afe3362d36d4358d47ffca16c76ecbe49e20bc09779987f0da4a9c860c658b9a7d96a3705cdb0323df4031560559d14ceb0ebb263cf5b
SSDEEP

3072:hb5b7Y/IDEdIFz7/LKlU5OWnmIyynqdi1vJ:fb7DDDB7jn5Okbydi

Score

N/A

Malware Config

Signatures

Files

virussign.com_6366eaad7fbe650aa346862be63f0860
.dll windows x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2024

Terms | Privacy