Static task
static1
Behavioral task
behavioral1
Sample
virussign.com_b11a0e6ca725d598d41f4f839d084690.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
virussign.com_b11a0e6ca725d598d41f4f839d084690.exe
Resource
win10v2004-20240426-en
General
-
Target
virussign.com_b11a0e6ca725d598d41f4f839d084690.vir
-
Size
842KB
-
MD5
b11a0e6ca725d598d41f4f839d084690
-
SHA1
629ad714eea285866f0f0b048d5e6dcb8711c7f0
-
SHA256
c0fc126019e62e8878a787d27d906c4fa872508348a54173901075e5cd1a6736
-
SHA512
0828ce710ba8c3cd28ebfb0522d2080e078eb0381856805b7184f4a1f4282620926ee9f66b39a96b7cc58940925d83167239862c96a330abeeb8858ae5c95569
-
SSDEEP
24576:RT5J33PzVwUzAly1o2bUgSsyy48M4/4HTbpb5Cmp:RT5JbVb1PNxrrSJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource virussign.com_b11a0e6ca725d598d41f4f839d084690.vir
Files
-
virussign.com_b11a0e6ca725d598d41f4f839d084690.vir.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ