Behavioral task
behavioral1
Sample
virussign.com_49c95d684089599d5b3b9224820db3b0.exe
Resource
win7-20240508-en
General
-
Target
virussign.com_49c95d684089599d5b3b9224820db3b0.vir
-
Size
85KB
-
MD5
49c95d684089599d5b3b9224820db3b0
-
SHA1
50a77d211b3ded961dcc84ad8531d16dd4b49eaf
-
SHA256
025c375d492eb37b21fa09ea4869b505a2938ea6caaaea2f08abebcf10447378
-
SHA512
32a21e020a4a7f8027185ad27b0f257acbfd3c1072754d3fc6ca357af9f0f6d7b095f79c250c6f7755def00782d54dd07611d411ea115eb4a703bcd4e003d8b6
-
SSDEEP
768:8qnum1opQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEmv:8vm1AeT7BVwxfvLFwjRv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource virussign.com_49c95d684089599d5b3b9224820db3b0.vir
Files
-
virussign.com_49c95d684089599d5b3b9224820db3b0.vir.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE