virussign[.]com_337ab5239344db341f72c04325815fe0[.]vir | Triage

Sharing

Copy URL Twitter E-mail

General

Target

virussign.com_337ab5239344db341f72c04325815fe0.vir
Size

27KB
MD5

337ab5239344db341f72c04325815fe0
SHA1

1101a44f8f77ba6d9097f23284a0395c166cab3c
SHA256

4449b28cc76ea2d9e28abac703b499cce38ea241fcbcbae4f8a9269221917956
SHA512

f91ff69b04e31942c1c55208828b81dcdc60eddf8e4c726b5d1b5b0e1a2522f6ead514d1f23ef391ac7be5ca8f9bb1d85cc76bf2ccc6e851ab21568f366a9a26
SSDEEP

384:UMp3HU08dJlM1jpj0Z3g+4tdmuJc1PbJkOUcFnj+r9x5jHGzMDW:UEHUblMVZ3kJOCaxk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_337ab5239344db341f72c04325815fe0.vir

Files

virussign.com_337ab5239344db341f72c04325815fe0.vir
.exe windows:5 windows x86 arch:x86

30c213a1468a81a73c565e04024cebe9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

kernel32

GetModuleHandleW
GetModuleHandleA
ExitProcess

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ