virussign[.]com_028f166b756eb5c3c7fb595b806e8150[.]vir | Triage

Sharing

Copy URL Twitter E-mail

General

Target

virussign.com_028f166b756eb5c3c7fb595b806e8150.vir
Size

81KB
MD5

028f166b756eb5c3c7fb595b806e8150
SHA1

a5c97750c7beeaeeb8288fb34775c1993d766aa3
SHA256

e489982da5a0dfd4686ec279e6a0ee5b88d034c3e71cd263cd7f88e716982e3b
SHA512

3ff027b5e5e3b3f12bd5584fbf84957eda34cfb39fa8d85f1507245af2cd710709cd8f03f94cba68c2b7d5c415df8c4fa190f86d56fe2f4468bb672c536cf49b
SSDEEP

1536:Td1Tzy48untU8fOMEI3jyYfFiuO9VhCoiK2AaA:TbzltUeOso9kov2Az

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_028f166b756eb5c3c7fb595b806e8150.vir

Files

virussign.com_028f166b756eb5c3c7fb595b806e8150.vir
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ