virussign[.]com_ad06aca4eba37849db70c8525876521c[.]vir

General

Target
virussign.com_ad06aca4eba37849db70c8525876521c.vir
Size 132KB
Sample240303-mp375ahc61
SHA256 43e1a2d51b71fc0fb87e19187cc6598ec5bf37759f6e23a3937dbf9e135c1239
MD5 ad06aca4eba37849db70c8525876521c
SHA1 6a2e34ae0933293c4ec2ff580b7fe2d40f1e5e7c
SHA512 176874a4500f1ac01fc1227a69c2761f1ac62c423da3daa29418e6ece954b989df95289ed9e87d4c390ad6aada1ad745ecf60e86b0e16589dacd2483f67ec637
SSDEEP 3072:coCbZSukOY8hrJFVNM/N/5sfqDfwqxHeC:Fork6hrJ3NON/5sGNeC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_ad06aca4eba37849db70c8525876521c.vir

File Explorer

virussign.com_ad06aca4eba37849db70c8525876521c.vir

.exe 132KB

virussign.com_ad06aca4eba37849db70c8525876521c.vir

IMPHASH c8770d9c3e993c66c95265f3a6c4487a
SHA256 43e1a2d51b71fc0fb87e19187cc6598ec5bf37759f6e23a3937dbf9e135c1239
MD5 ad06aca4eba37849db70c8525876521c
SHA1 6a2e34ae0933293c4ec2ff580b7fe2d40f1e5e7c
SHA512 176874a4500f1ac01fc1227a69c2761f1ac62c423da3daa29418e6ece954b989df95289ed9e87d4c390ad6aada1ad745ecf60e86b0e16589dacd2483f67ec637
SSDEEP 3072:coCbZSukOY8hrJFVNM/N/5sfqDfwqxHeC:Fork6hrJ3NON/5sGNeC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

ord582 __vbaVarSub __vbaStrI2 ord583 ord584 _CIcos _adj_fptan __vbaStrI4 ord585 __vbaVarMove ord187 __vbaVarVargNofree ord586 ord693 __vbaFreeVar ord587 __vbaAryMove __vbaLenBstr ord695 __vbaStrVarMove ord696 __vbaFreeVarList __vbaEnd __vbaPut3 _adj_fdiv_m64 __vbaPut4 ord516 ord517 _adj_fprem1 ord519 __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaRecDestruct __vbaLenBstrB __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct ord669 __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i __vbaVarIndexLoad ord306 __vbaStrFixstr ord307 ord630 __vbaFpR8 _CIsin ord631 __vbaErase ord709 __vbaVarZero __vbaChkstk ord633 __vbaFileClose ord527 __vbaGenerateBoundsError __vbaStrCmp __vbaGet3 __vbaAryConstruct2 __vbaPutOwner3 __vbaI2I4 DllFunctionCall __vbaFpUI1 __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaUI1I2 _CIsqrt __vbaVarAnd __vbaUI1I4 __vbaFpCmpCy __vbaVarMul __vbaExceptHandler ord711 __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord714 ord608 __vbaFPException ord318 ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaGetOwner4 ord535 __vbaI2Var ord644 ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr __vbaNew2 __vbaVar2Vec __vbaVarInt _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList __vbaVarNot __vbaDerefAry1 ord576 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaVarAdd __vbaStrToAnsi __vbaVarDup ord614 __vbaFpI4 ord616 __vbaVarCopy _CIatan __vbaStrMove __vbaAryCopy ord618 __vbaStrVarCopy _allmul _CItan __vbaAryUnlock __vbaFPInt __vbaUI1Var _CIexp __vbaMidStmtBstr __vbaFreeStr __vbaI4ErrVar __vbaFreeObj

Sharing