virussign[.]com_df26e64dc894f465a0ab794114180ea0[.]vir | Triage

Sharing

Copy URL Twitter E-mail

General

Target

virussign.com_df26e64dc894f465a0ab794114180ea0.vir
Size

12KB
MD5

df26e64dc894f465a0ab794114180ea0
SHA1

333ebbedaba581a8cd7084ee7a22cb033c0df519
SHA256

3cd72ada7eead7793d8289d8a80a956d863125f5d3788ed5e665e9239895edc0
SHA512

ead1e4a4ba3224b730a20899c7ff5cc9319aa389d932e46af564f3f6cd6ce1d1646b5d26b78533635e569d9a307135f3b968f6d484f1d60faaa7ca812c601a39
SSDEEP

384:VL7li/2zJq2DcEQvdhcJKLTp/NK9xa61:1pM/Q9c61

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_df26e64dc894f465a0ab794114180ea0.vir

Files

virussign.com_df26e64dc894f465a0ab794114180ea0.vir
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ