WinVir[.]exe | Triage

Resubmissions

30/05/2024, 11:40

240530-ns6m4agh54 6

30/05/2024, 11:30

240530-nmb7asgf33 6

30/05/2024, 11:27

240530-nkhajaff5s 6

Sharing

General

Target

WinVir.exe
Size

15KB
MD5

27b41f1ea6667f82905dd79d688ced6c
SHA1

020c48a92fa49355594784edf7cd434e4fc93487
SHA256

6d5af85773d68b8a74c3510cbe9f2bd23173899dfed446b1c2a7601863ce2c92
SHA512

804da2b4eb6bdbe0889d60b053928b6e014193656189f2f21fc2d94aadcac9a75c2b5a14acd1c50351a3606dc193cb8d77b5fe0e7c1d2052d609727500995aab
SSDEEP

384:LsLmXQi2QGHyzpquxViQiZPOOEcpdWz7Vbc7CpfB0I:LFXvGq1tcm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WinVir.exe

Files

WinVir.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Vadim\source\repos\WinVir\WinVir\obj\Release\WinVir.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ