virussign[.]com_14882304541409ec2a8a5322110a1b20[.]vir | Triage

Sharing

Copy URL Twitter E-mail

General

Target

virussign.com_14882304541409ec2a8a5322110a1b20.vir
Size

14KB
MD5

14882304541409ec2a8a5322110a1b20
SHA1

3207e37370038520a490523d0e3dc492d123fb50
SHA256

e49ef497b39b7e9c318fc9f93b7509232670d21c5c4887d3b1a7fb8d458012ec
SHA512

c4920c8e1389ad87f9999450dd5dd8ae694f5fe67509be3c5b93b28b419fdbd830009eda6207463fa260179cbbae7f16bd4ac701474f76ba227e2e6d16a49e30
SSDEEP

384:znwn6lzgu6Y5AcyHauVzuRNA4hPZdTjVbK4t:zTlz8AAcyHzVzuRNA4hPzTH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_14882304541409ec2a8a5322110a1b20.vir

Files

virussign.com_14882304541409ec2a8a5322110a1b20.vir
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\\Users\\1\\Desktop\\Kwork\\BattlMap_Kwork_New\\BattleMap_New\\Library\\BurstCache\\JIT\\9838d18884079c6d88c0d0785d4507f1.pdb

Exports

Exports

4B57F329150937D0
burst.initialize
burst.initialize.externals
burst.initialize.statics

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ