virussign[.]com_126b3843a4a1fb5a1c24f4a41eaa8790[.]vir | Triage

Sharing

General

Target

virussign.com_126b3843a4a1fb5a1c24f4a41eaa8790.vir
Size

12KB
MD5

126b3843a4a1fb5a1c24f4a41eaa8790
SHA1

fcc820bfff76ae2dbd7c89119b87cd717644f6db
SHA256

8e9a8d11b239f2f4a3d87f14731844487b082db2ce8c4d1e4806a34288b60215
SHA512

f651810e1660613004fe77bbdaca3f9a87d1e56974084bd81b2f2ca7d40f810a71f076b483c09077c538d4ea43cc43df2e181dfc218403cfa51c280dd0dbc84f
SSDEEP

384:ZL7li/2zaq2DcEQvdhcJKLTp/NK9xaGw:pCM/Q9cGw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_126b3843a4a1fb5a1c24f4a41eaa8790.vir

Files

virussign.com_126b3843a4a1fb5a1c24f4a41eaa8790.vir
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ