Static task
static1
Behavioral task
behavioral1
Sample
virussign.com_27e743611d2f304ee6360b073146bcc0.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
virussign.com_27e743611d2f304ee6360b073146bcc0.exe
Resource
win10v2004-20240508-en
General
-
Target
virussign.com_27e743611d2f304ee6360b073146bcc0.vir
-
Size
14KB
-
MD5
27e743611d2f304ee6360b073146bcc0
-
SHA1
524f77d0362f2bb847aac77856b6b4469909b1ca
-
SHA256
496c5635f1f3002eb47c1b00a2441a9fe6f77e629bd92e12ed756d805010b98c
-
SHA512
fbd3a04e1a26ffe6ad7777540433d8067fd2befb253d1d53684ab266809775b374deb5c692b3f509007ad0a78abe4099a5038d534c1f811200a412022b5a53db
-
SSDEEP
384:5x3c/+p0000000000000woRwJw4DE045HEL6L6L6L6:U/+p0000000000000wrCCAAAAA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource virussign.com_27e743611d2f304ee6360b073146bcc0.vir
Files
-
virussign.com_27e743611d2f304ee6360b073146bcc0.vir.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ