Static task
static1
Behavioral task
behavioral1
Sample
virussign.com_d8aaca9e57b26750ff168d243ebcf570.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
virussign.com_d8aaca9e57b26750ff168d243ebcf570.exe
Resource
win10v2004-20240508-en
General
-
Target
virussign.com_d8aaca9e57b26750ff168d243ebcf570.vir
-
Size
14KB
-
MD5
d8aaca9e57b26750ff168d243ebcf570
-
SHA1
d45c86f50adb171b85c72224e024d7917844f741
-
SHA256
783e1e5a4c3a16782229eb8f70f88cf649c06dbbff28229e4c4255e1929ca2d3
-
SHA512
8479e8ab9c85ab1b7a18f6d09288cc8243e7d9a979f4c75d71362e37196071a8fddb23986c4bd21ba52a47a6d9a6c07dd2c3714f58791a00ed7ef56a6d11f049
-
SSDEEP
384:ZPtpuDW86uR9Vuv72S7jFOerx6NfoPHUyDE045HP5lU6I:ZPjuy3ufUv72SHgCx6NfQ0oAx06I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource virussign.com_d8aaca9e57b26750ff168d243ebcf570.vir
Files
-
virussign.com_d8aaca9e57b26750ff168d243ebcf570.vir.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ