virussign[.]com_b35d660b2d63eeaae3fa071a489e5640[.]vir | Triage

Sharing

Copy URL Twitter E-mail

General

Target

virussign.com_b35d660b2d63eeaae3fa071a489e5640.vir
Size

47KB
MD5

b35d660b2d63eeaae3fa071a489e5640
SHA1

72b172a7a77e351327a9b3135e05a43b82c2ba9c
SHA256

2364d7693c5303e88123ae069307143335c3b965cda6e124d965471105a1a6d7
SHA512

5cf408c6076dd12c42694504bd6ad11057c3efb7e85f0711aa94316f55e27f9ecabd4aab7bcd4b48341d6ae51f33d78723502e52afb62310911279ee94b4a0ae
SSDEEP

768:jIUudN6/5BmWP3UDhXSNy5WsGgC/88RGRXKXpFlX1Oz:j87g5wWPkDhXke0oXwJ1Oz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_b35d660b2d63eeaae3fa071a489e5640.vir

Files

virussign.com_b35d660b2d63eeaae3fa071a489e5640.vir
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE