Dr[.] VBS Virus Maker[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Dr. VBS Virus Maker.exe
Size

226KB
MD5

245b1a19db4e1660d49410800c274cdf
SHA1

8984087353e52eb97731c4d499b97121effd9867
SHA256

25e3def825c826f322c299cd88533d34cb142ee3b5ff74822c85406a9d59dee2
SHA512

25d788d23737d19e59dd4e2308d0220a016fa34f2836e8cb7e45196350614054027f409539fd1c4008bcc49938d11d085626d267a0899d8665cedb324c17b242
SSDEEP

1536:O4lkePdCGSC/bfDV78E/xhd+H5NcL+duyFzmfudq9qEprw7OHRzYzohpXg:O4lkUSCTfDV78EUufudq93BRYohxg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Dr. VBS Virus Maker.exe

Files

Dr. VBS Virus Maker.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ