Static task
static1
Behavioral task
behavioral1
Sample
virussign.com_da428d548aabe4b9f26d54b57ca2db50.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
virussign.com_da428d548aabe4b9f26d54b57ca2db50.exe
Resource
win10v2004-20240426-en
General
-
Target
virussign.com_da428d548aabe4b9f26d54b57ca2db50.vir
-
Size
250KB
-
MD5
da428d548aabe4b9f26d54b57ca2db50
-
SHA1
6209556f988a1e531d52ece3580cf5afd626d80a
-
SHA256
bb923f0c8a5a7936837c04d84355a8cec7fff8aeb4d6a0265d388407a6810bf6
-
SHA512
3e556ff9707fb75210985bdeb8d89c4ce5504a99cd334c507f0e722e8d8b58ba6548159fd7da84b4c273eb4fabfc977652246f07666614d94c71e2e27307fc31
-
SSDEEP
6144:ztvBPnU1b7e9SQii1EkoNlhlrQ2ZrM2xVp:Zv1nWdQP1EDhZPxV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource virussign.com_da428d548aabe4b9f26d54b57ca2db50.vir
Files
-
virussign.com_da428d548aabe4b9f26d54b57ca2db50.vir.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
GVD0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GVD1 Size: 205KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE