virussign[.]com_44ad2f98fb3704606e20cd24c172e160[.]vir | Triage

Sharing

Copy URL Twitter E-mail

General

Target

virussign.com_44ad2f98fb3704606e20cd24c172e160.vir
Size

12KB
MD5

44ad2f98fb3704606e20cd24c172e160
SHA1

0dbef5c5dcd0f7d592c8149571b61b57b5e7ecbf
SHA256

42bdccfd7b3540163a6cf8db12904f1339ade059037de61c7518a4c238585a8a
SHA512

a37c9c605de95d7484d41bee73b4cd3122a138b3ba14fd709b30061fb7daf61d69f5720f96a593af1a306e875a77bbfc957759eae5d49ac6a624c7a03210ab3c
SSDEEP

384:+L7li/2zoq2DcEQvdhcJKLTp/NK9xapzP:okM/Q9cpzP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_44ad2f98fb3704606e20cd24c172e160.vir

Files

virussign.com_44ad2f98fb3704606e20cd24c172e160.vir
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ