Static task
static1
Behavioral task
behavioral1
Sample
virussign.com_9599e82a8fa3a606c186e75e4d7d7100.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
virussign.com_9599e82a8fa3a606c186e75e4d7d7100.exe
Resource
win10v2004-20240426-en
General
-
Target
virussign.com_9599e82a8fa3a606c186e75e4d7d7100.vir
-
Size
340KB
-
MD5
9599e82a8fa3a606c186e75e4d7d7100
-
SHA1
ea31dacbcba204026017a13e43f867c4cf0c4690
-
SHA256
f4dc1a032d33002bd859c3cad82dc31ffed0ce62c29fb899860a37b1d7dcfcbc
-
SHA512
126354727846d252d856ededee7aabb66442c0f29cb945735391f9a26657f1d682cdd0745672b5801cae039f8e13d573849b51ed2998b801976330df81d0194d
-
SSDEEP
6144:fDX6h8dONexs8ijaAXXQppljuz5IksclS79zStGWF3cPRRlr61ysgjIX:fDVfsxZApnjE5GcSZzpgYJr617n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource virussign.com_9599e82a8fa3a606c186e75e4d7d7100.vir
Files
-
virussign.com_9599e82a8fa3a606c186e75e4d7d7100.vir.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ