virussign[.]com_24f2ebb86d64edf38b8cce711aeaf020[.]vir | Triage

Sharing

Copy URL Twitter E-mail

General

Target

virussign.com_24f2ebb86d64edf38b8cce711aeaf020.vir
Size

634KB
MD5

24f2ebb86d64edf38b8cce711aeaf020
SHA1

b736ca7dc5963ce26018019d6c9d1a8b304b0450
SHA256

6a29201d6d7c3a766583c95ccf5512b8dfb3ca0cd61d5ea236a51a227f4b3dfa
SHA512

936864e58df835b259885d7de3649c2bd0097f56e229e8f8573379d7add18849f1dccd428d144c604afda250faad0cdf48a897204409fb21ec31fdabf27ef8b2
SSDEEP

6144:IooZIFH5nnz1gL5pRTMTTjMkId/BynSx7dEe6XwzRaktNP08NhKs39zo43fTtl1R:ISF1z1gL5pRTcAkS/3hzN8qE43fm78V9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_24f2ebb86d64edf38b8cce711aeaf020.vir

Files

virussign.com_24f2ebb86d64edf38b8cce711aeaf020.vir
.exe windows:4 windows x86 arch:x86

7909826cb72884560635663c8951a127

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

advapi32

OpenProcessToken

user32

ExitWindowsEx

version

GetFileVersionInfoSizeA

ws2_32

WSAStartup

Sections

VHqxTUpa
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IaDsgWGk
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE