virussign[.]com_99e343f569c3566c37b537ea5259bcd0[.]vir

General

Target
virussign.com_99e343f569c3566c37b537ea5259bcd0.vir
Size 2.0MB
Sample240608-nfct9abb2v
SHA256 b76f6f0167cec9c4a97572394a4bf77b9ad7ef3ada519440a84ac61a05a6b2fe
MD5 99e343f569c3566c37b537ea5259bcd0
SHA1 229835f64e788f0209b8c9321aa44d7d20980d94
SHA512 606de4254f0130aed08a0e893aba384f094173a931be7ed5380d64c5d7e43d7d5b2d16d2e7294a42c27fe4d5bc93c296b7cf199769d7e363cc32d3a693ffcd39
SSDEEP 49152:XnvrEtAk+52j9c21Zen0H1BttfU6pTvmdWTW+1fdkwQr:XvrEtAk+cjt1YnIlts6BmdWTWM0
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_99e343f569c3566c37b537ea5259bcd0.vir

SHA256 b76f6f0167cec9c4a97572394a4bf77b9ad7ef3ada519440a84ac61a05a6b2fe
MD5 99e343f569c3566c37b537ea5259bcd0
SHA1 229835f64e788f0209b8c9321aa44d7d20980d94
SHA512 606de4254f0130aed08a0e893aba384f094173a931be7ed5380d64c5d7e43d7d5b2d16d2e7294a42c27fe4d5bc93c296b7cf199769d7e363cc32d3a693ffcd39
SSDEEP 49152:XnvrEtAk+52j9c21Zen0H1BttfU6pTvmdWTW+1fdkwQr:XvrEtAk+cjt1YnIlts6BmdWTWM0
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

105216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths