Static task
static1
Behavioral task
behavioral1
Sample
virussign.com_678af83929a16bc70c4e57b493c5da90.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
virussign.com_678af83929a16bc70c4e57b493c5da90.exe
Resource
win10v2004-20240426-en
General
-
Target
virussign.com_678af83929a16bc70c4e57b493c5da90.vir
-
Size
14KB
-
MD5
678af83929a16bc70c4e57b493c5da90
-
SHA1
a33e7acf2f7797c11bf0576707549fa963750d87
-
SHA256
afed1f4e74cdfdc6afa55daecbb9d3e0d4f5cb46ae98bd06da41ecd9ce3f430e
-
SHA512
b42262ee19a4a1098f0da02a6b71bb17ce93931834757c3ab833fe9eb77599a60429b2cf470c550f95420d4ab27d83ce14f1faaa8f40c2684a38820328a1df32
-
SSDEEP
192:L8nYEuL1Q94tCerwe0HpUlAz515aHV3c1GfeMOPUpAa6JsWkxcCqDE045HQ:LaYRQKrwe0JIAcM6FyAAazWKSDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource virussign.com_678af83929a16bc70c4e57b493c5da90.vir
Files
-
virussign.com_678af83929a16bc70c4e57b493c5da90.vir.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ