virussign[.]com_ab89480a9cd73889e1ff4cb72d40fb50[.]vir

General

Target
virussign.com_ab89480a9cd73889e1ff4cb72d40fb50.vir
Size 240KB
Sample240303-mndabahf76
SHA256 7680c338cce9a2739ed9171976d8cb361e4e755d1ba455ec136c1ea30643aa95
MD5 ab89480a9cd73889e1ff4cb72d40fb50
SHA1 af0ffaf2acc64bd6089cd98c772b4c64432105cf
SHA512 83f67c5acb53df85c3623f2d27386fb3c19a1be456aa93cfe97b17438faaf1933b2bc84407e6fe9501b70d219fdb4ec73661137e45b54b3ceb1d3c27d1fdd345
SSDEEP 3072:zDkNwT8j6VlpuBd90i/SmWKLi7CjFSivnfu3fbMdozt5czH0R:nq0UGKGkFRKfeoztOO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_ab89480a9cd73889e1ff4cb72d40fb50.vir

File Explorer

virussign.com_ab89480a9cd73889e1ff4cb72d40fb50.vir

.exe 240KB

virussign.com_ab89480a9cd73889e1ff4cb72d40fb50.vir

IMPHASH f924b14689bb693808b8fd83881b3e7f
SHA256 7680c338cce9a2739ed9171976d8cb361e4e755d1ba455ec136c1ea30643aa95
MD5 ab89480a9cd73889e1ff4cb72d40fb50
SHA1 af0ffaf2acc64bd6089cd98c772b4c64432105cf
SHA512 83f67c5acb53df85c3623f2d27386fb3c19a1be456aa93cfe97b17438faaf1933b2bc84407e6fe9501b70d219fdb4ec73661137e45b54b3ceb1d3c27d1fdd345
SSDEEP 3072:zDkNwT8j6VlpuBd90i/SmWKLi7CjFSivnfu3fbMdozt5czH0R:nq0UGKGkFRKfeoztOO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 ord693 __vbaVarVargNofree ord187 __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLineInputStr __vbaLenBstr ord696 __vbaEnd __vbaPut3 __vbaFreeVarList _adj_fdiv_m64 __vbaPut4 __vbaFreeObjList ord516 __vbaStrErrVarCopy ord517 _adj_fprem1 ord518 ord519 __vbaStrCat __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj __vbaLenBstrB _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarIndexLoadRefLock ord669 ord591 __vbaLateMemSt __vbaForEachCollObj __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord520 __vbaStrFixstr __vbaBoolVarNull _CIsin __vbaErase ord709 ord631 __vbaVarZero ord632 __vbaNextEachCollObj __vbaChkstk ord633 __vbaFileClose EVENT_SINK_AddRef ord527 ord528 __vbaGenerateBoundsError __vbaGet3 __vbaStrCmp __vbaAryConstruct2 __vbaPutOwner3 __vbaVarTstEq DllFunctionCall __vbaVarOr __vbaVarLateMemSt __vbaCastObjVar __vbaRedimPreserve _adj_fpatan __vbaLateIdCallLd __vbaRedim EVENT_SINK_Release _CIsqrt __vbaObjIs EVENT_SINK_QueryInterface __vbaVarMul __vbaFpCmpCy __vbaExceptHandler ord711 ord712 _adj_fprem _adj_fdivr_m64 ord714 ord607 __vbaI2Str ord530 ord608 __vbaFPException ord717 __vbaInStrVar __vbaUbound ord533 __vbaStrVarVal __vbaVarCat __vbaGetOwner4 ord535 __vbaI2Var ord537 ord644 ord645 _CIlog ord647 __vbaFileOpen __vbaVar2Vec __vbaNew2 __vbaInStr __vbaVarInt ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord578 ord685 ord100 ord579 __vbaI4Var __vbaAryLock __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaStrComp __vbaFpI2 __vbaVarCopy __vbaFpI4 ord616 ord617 __vbaLateMemCallLd _CIatan __vbaAryCopy __vbaStrMove ord618 __vbaCastObj ord619 __vbaStrVarCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing