virussign[.]com_4857140eae40461be589101be6366180[.]vir | Triage

Sharing

Copy URL Twitter E-mail

General

Target

virussign.com_4857140eae40461be589101be6366180.vir
Size

14KB
MD5

4857140eae40461be589101be6366180
SHA1

c7fa89d2958d9fdac645ba2d6801ec5c16033b5c
SHA256

0ed855470fdfd5d1637ec301dab5f13ce4815bf6622783f1ff0d50b8290db9a3
SHA512

8e319b688e21cd9818686b947782d0602f78ef0db2f19afb0f1998270044a9ce659273871c840913d8e6246f80b580e256fd610052cb2df15b747ad4e6b2240f
SSDEEP

192:NJKkS58Gf2LUiHF5F5F5F5F5F5F5F5FZggggg5d8C5SA43V8ZqDE045HQDdddd:Ok9Gf2LU0gggggj84P4BDE045HYdddd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_4857140eae40461be589101be6366180.vir

Files

virussign.com_4857140eae40461be589101be6366180.vir
.exe windows:4 windows x86 arch:x86

d7e0a944a53b8f23bbb8185967ff5358

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

ord65535
VBVM60.DLL
�rt��rn�r@9�r��rHJ�r�I�r�r�r;ġrr��r/p�r�b�r}A�r�}�rġr�V�rlW�r��r� �r ár]��r:�r��r��r�G�r�}�r��r��r��rV�ru�rH�r}i�r+��rg��r=�ruB�r�:�r7��rV�r:�r:�rJl�r�ڡrl�rn�r��r��r�5�r/N�r�ơr�m�rף�rpu�rѷ�r�m�r��r0l�r r��rD��r�ơrݢr�k�r�Bf�� f6nf��

Sections

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ