virussign[.]com_0b93ff0304e0df44832252cbe0d14db0[.]vir | Triage

Sharing

General

Target

virussign.com_0b93ff0304e0df44832252cbe0d14db0.vir
Size

134KB
MD5

0b93ff0304e0df44832252cbe0d14db0
SHA1

549691aec127867edea9ee42d36a77a1f85d24c8
SHA256

e4937f79c52f5199acfcc315b1a3e531d66e29277cfdbc3ca167f6459d875e83
SHA512

daa248b7499385c8e9adb2b5c8a098b2688de67caa5c85136314629ebeb095c186397096cc22c3c6bddd36e28cf01d3fd0130c0fe7e3d5931316f4600126619e
SSDEEP

1536:wmOyo1cFFJnA6666666666666666666666666GkBiiMZBIklCBkGs4tUmTOcTE2E:wp1crJnU+DyBI+C/JtUmT7E2PQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_0b93ff0304e0df44832252cbe0d14db0.vir

Files

virussign.com_0b93ff0304e0df44832252cbe0d14db0.vir
.exe windows:5 windows x86 arch:x86

93ffdd124097d9f82ae7a13dc849ede9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

progman.pdb

Imports

msvcrt

_XcptFilter
_cexit
exit
__initenv
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv
_c_exit

kernel32

GetModuleHandleA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 131KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE