virussign[.]com_55d039385d7f8e50c3760064232bf870[.]vir | Triage

Sharing

Copy URL Twitter E-mail

General

Target

virussign.com_55d039385d7f8e50c3760064232bf870.vir
Size

79KB
MD5

55d039385d7f8e50c3760064232bf870
SHA1

83645bfe408d91771a73640e123a9fc8c0a7a7a2
SHA256

367c71c4e85b8f5ffc6027429907299b5a0bf5c707abb653cbcacfcb67a2697b
SHA512

9e3b7d1d529e7252a307aad82af5bbedc393aae8ed045289746174559dcf5e8e6ae620441776c1ee8ea984e67859e9c06e49ebe1ff54b7a13bffe61cdfdde286
SSDEEP

768:MpQNwC3BESe4Vqth+0V5vKwQNwC3BE3bqNmCRh5EMY:keT7BVwxfv9eTAGv5zY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_55d039385d7f8e50c3760064232bf870.vir

Files

virussign.com_55d039385d7f8e50c3760064232bf870.vir
.exe windows:4 windows x86 arch:x86

bfbf457d52153d2191e67bb6c9212334

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord542
ord545
ord546
ord547
ord580

Sections

.text
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE