virussign[.]com_3956acf3deccba61fd11623e6d58c340[.]vir | Triage

Sharing

Copy URL Twitter E-mail

General

Target

virussign.com_3956acf3deccba61fd11623e6d58c340.vir
Size

400KB
MD5

3956acf3deccba61fd11623e6d58c340
SHA1

1478eb35bbae2e552138b4dd009a01de7e2fd3e7
SHA256

6ca74ae8a285ce6352d8b144a28cf9ff6cf7a5758270a21e030ca8af222e9191
SHA512

e59c7c34ed2604a9240dffe311bf594b693cf58938dc158caac0787afb16d96f2634c45019f22809d6c624f41e2576fb6487a3997dfd02f264c776acfd30b7f9
SSDEEP

6144:nXt/UvOxRq7RYjAW6icchUkmrLmbmk3AYFIkF7Qm9YVaYqfmWu:XlrAYsW6ipLGqV3AYFNYx4m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_3956acf3deccba61fd11623e6d58c340.vir

Files

virussign.com_3956acf3deccba61fd11623e6d58c340.vir
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE