Static task
static1
Behavioral task
behavioral1
Sample
virussign.com_af30e4cd5cbffa60ce82412e14036ed0.exe
Resource
win7-20240221-en
General
-
Target
virussign.com_af30e4cd5cbffa60ce82412e14036ed0.vir
-
Size
59KB
-
MD5
af30e4cd5cbffa60ce82412e14036ed0
-
SHA1
d83fdeca2a63c1204a62feea5ea42d20fdcd6605
-
SHA256
e2e48dc2d77e3e4badaab64c9869d2529f6906b6ce6ae00d357a353df7d7d435
-
SHA512
a9ba9a4df67d4dd1a33f1a140b9189d7309dee9e51ffaa97ad7ff8d75113610d3acdcf4cdd1288d63f4fde3b9b9ebd4f6452cbaefa79bd33486f4b2fe2a7adbb
-
SSDEEP
1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsImsV:ymb3NkkiQ3mdBjFIsIFV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource virussign.com_af30e4cd5cbffa60ce82412e14036ed0.vir
Files
-
virussign.com_af30e4cd5cbffa60ce82412e14036ed0.vir.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ