Static task
static1
Behavioral task
behavioral1
Sample
virussign.com_24278623703919d93aabb60e3e112ae0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
virussign.com_24278623703919d93aabb60e3e112ae0.exe
Resource
win10v2004-20240508-en
General
-
Target
virussign.com_24278623703919d93aabb60e3e112ae0.vir
-
Size
320KB
-
MD5
24278623703919d93aabb60e3e112ae0
-
SHA1
cab57f0b2614636ec48cc2281298c3d34cf2328f
-
SHA256
5fc62bc6fe7e926243e12e957f997ded054e0b23e24facd16ed73d5dbcf7bfbf
-
SHA512
e717d05939934bf67e7ecca87d6bf93ff703ae71481f7d39b494c28ad29d1eb53abc967ceb8b5a4ada2afd00f0f88b839930b6458afdc41eedf3c6756c8f4ded
-
SSDEEP
6144:XGj312RfS1556NXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:Xi312EB6NxDIBuOFe7/uT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource virussign.com_24278623703919d93aabb60e3e112ae0.vir
Files
-
virussign.com_24278623703919d93aabb60e3e112ae0.vir.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE