virussign[.]com_fe320822e46f542913066100909b9a10[.]vir | Triage

Sharing

Copy URL Twitter E-mail

General

Target

virussign.com_fe320822e46f542913066100909b9a10.vir
Size

301KB
MD5

fe320822e46f542913066100909b9a10
SHA1

02abdf62e316b3098d22f104c63c39c2feaf34b2
SHA256

89e9270638fc4ca3b18174f39fbc4e65b9457e7556f0cf8f7f98d7d11d26a597
SHA512

226b4ae115f61d763f86f50aee0b00a909d59527ee2fb4cab5e532ef9769908c634cdc71371ba23e15ddccda9ae59a9dad0cc9045ae3cb7e29a2a5ada9a5a412
SSDEEP

6144:/MHD3/AKUAkL03qg+Xr+UYgo0NiHg0ZIGpZn052a/XC:/MHL/AufaBSgo0NiHgkISaQh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_fe320822e46f542913066100909b9a10.vir

Files

virussign.com_fe320822e46f542913066100909b9a10.vir
.exe windows:4 windows x86 arch:x86

b1332fc8454ed69bea840c0dc3a3695f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord660
ord666
ord598
ord709
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ord645
ord570
ord576
ord100
ord617
ord619
ord546
ord580

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ