virussign[.]com_953f33277b03936935a81658cb46cc0c[.]vir

General

Target
virussign.com_953f33277b03936935a81658cb46cc0c.vir
Size 149KB
Sample240303-ls1ezagg3w
SHA256 188d071fa7ec7c48dadf1d0f9a950d1b59b5368c54c5f6cbc2d7df68360902ea
MD5 953f33277b03936935a81658cb46cc0c
SHA1 7b6154aaf6d3854ee67f759be22d7612e62ff4dc
SHA512 62d8036c2faaa1ff193f75d785ec926fbf8f99ff1e2b9ea527d1f97a9fe8a8c797af1374ad718eebb296abca95554e57672668613a06139647cdbfedef0ca6b9
SSDEEP 3072:4xIt0EJ3pSaCQSeqL87yBDP5PmFzQuJxoXoTegDtt:iIHYag8exOQuToYKgD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_953f33277b03936935a81658cb46cc0c.vir

File Explorer

virussign.com_953f33277b03936935a81658cb46cc0c.vir

.exe 149KB

virussign.com_953f33277b03936935a81658cb46cc0c.vir

IMPHASH 130782123ff8b2d6c5482048708bf2aa
SHA256 188d071fa7ec7c48dadf1d0f9a950d1b59b5368c54c5f6cbc2d7df68360902ea
MD5 953f33277b03936935a81658cb46cc0c
SHA1 7b6154aaf6d3854ee67f759be22d7612e62ff4dc
SHA512 62d8036c2faaa1ff193f75d785ec926fbf8f99ff1e2b9ea527d1f97a9fe8a8c797af1374ad718eebb296abca95554e57672668613a06139647cdbfedef0ca6b9
SSDEEP 3072:4xIt0EJ3pSaCQSeqL87yBDP5PmFzQuJxoXoTegDtt:iIHYag8exOQuToYKgD
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

28097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalFix GetCPInfoExW _lopen EndUpdateResourceA GetModuleHandleA GetPrivateProfileSectionA lstrlenA lstrlenW FindFirstVolumeMountPointA LocalFree ChangeTimerQueueTimer ExitThread LoadLibraryA GetConsoleAliasExesLengthA GetProcAddress InterlockedExchangeAdd SetVolumeLabelW CreateFileW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc GetLastError HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers CreateFileA CloseHandle

advapi32

QueryServiceStatus CreateProcessAsUserW SetSecurityDescriptorDacl QueryServiceObjectSecurity RegEnumKeyA RegEnumKeyExW RegGetKeySecurity CreateServiceA ConvertToAutoInheritPrivateObjectSecurity

msimg32

AlphaBlend

Sharing