Static task
static1
Behavioral task
behavioral1
Sample
virussign.com_af8bdd40d6469281c7d6b7baffa04d90.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
virussign.com_af8bdd40d6469281c7d6b7baffa04d90.exe
Resource
win10v2004-20240426-en
General
-
Target
virussign.com_af8bdd40d6469281c7d6b7baffa04d90.vir
-
Size
14KB
-
MD5
af8bdd40d6469281c7d6b7baffa04d90
-
SHA1
3f409661bc77350d4a272489fcdf78a6accd7234
-
SHA256
e86187c227e531df16b9f81bf3d88dd11324e7659ecfb93c72c56f04da5f61d4
-
SHA512
9b41d3bb351f68b32093bc1eb00d06984e254d3e0decddfb6bf1a4bf8e7ca27db6be2756ab4072bcd3d694c038699f88bdc3549a3c0ff884b6652686fb79c06f
-
SSDEEP
192:oBZn8MTGJqm4oqwOeLlLC3v4iI09XpDLDLDLDLDOOOOOOOOqc8c8wWFjDnqDE04m:oBZn8MwqtoqwyvBZ9Qc8c8RDqDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource virussign.com_af8bdd40d6469281c7d6b7baffa04d90.vir
Files
-
virussign.com_af8bdd40d6469281c7d6b7baffa04d90.vir.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ