Virus[.]Autorun[.]ATA_virussign[.]com_cd32da2cae57c30b9b3b3b5492c72920[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Virus.Autorun.ATA_virussign.com_cd32da2cae57c30b9b3b3b5492c72920.exe
Size

167KB
MD5

cd32da2cae57c30b9b3b3b5492c72920
SHA1

d16bc032feff8280bf170efe526f3207f40f3443
SHA256

e5b02d9b47a711b29e54d8d818c66003e68fe004d4c33d4f80e8ba3340a87e35
SHA512

96e0c0a18993a8942cc26230159e1205a421c86d0689c19cfd989b01561c283497d80510c176d32ba76caafb80ca2bc6cab2d08c7bed9175d90c09d4768ad8ec
SSDEEP

3072:j7XdyeLiDIG+MrLE69kHpFLw90lfZSeDIRKe0pewIUW1xTBwUQBzbTFr:j7oeLiDIG+MPE6c2Qz0RKTYv1qdRr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Virus.Autorun.ATA_virussign.com_cd32da2cae57c30b9b3b3b5492c72920.exe

Files

Virus.Autorun.ATA_virussign.com_cd32da2cae57c30b9b3b3b5492c72920.exe
.exe windows:4 windows x86 arch:x86

deb4192e1b6aafb05c55a891947175bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
TlsGetValue
GetFullPathNameA
GetOEMCP
GetThreadIOPendingFlag
HeapCreate
EnterCriticalSection
MultiByteToWideChar
GetStringTypeW
CloseHandle
IsBadCodePtr
GetFullPathNameW
FreeLibrary
ResetEvent
GlobalAlloc
GetSystemTime
lstrcmpW
GetCPInfo
GetEnvironmentStringsW
TlsAlloc
GetFileType
GetStartupInfoA
SetPriorityClass
InterlockedIncrement
HeapAlloc
ReleaseSemaphore
GetPriorityClass
UnmapViewOfFile
SetEvent
LeaveCriticalSection
lstrcpyA
IsBadReadPtr
FileTimeToSystemTime
CompareStringA
GetACP
LoadLibraryA
CreateThread
HeapSize
CreateMutexA
TransmitCommChar
GlobalUnlock
DeleteCriticalSection
GetPrivateProfileStringA
lstrcmpA
ExitThread
ExitProcess
RaiseException
FlushFileBuffers
GetCommandLineA
InterlockedExchange
LCMapStringW
GetEnvironmentStrings
CreateFileW
Sleep
SetStdHandle
CreateFileMappingA
GetStdHandle
LCMapStringA
GetModuleHandleA
EnumResourceNamesW
IsBadWritePtr
MapViewOfFile
ExitProcess
GetTempPathA
InterlockedDecrement
GetEnvironmentVariableA
FreeEnvironmentStringsW
CreateSemaphoreA
WideCharToMultiByte
GetModuleFileNameA
TerminateProcess
FreeEnvironmentStringsA
TlsSetValue
WriteFile
WaitForSingleObject
GetUserDefaultLCID
GetDiskFreeSpaceExA
SetEndOfFile
LoadLibraryW
UnhandledExceptionFilter
CompareStringW
GlobalFree
GetProcAddress
SetHandleCount
GetLastError
FileTimeToLocalFileTime
WritePrivateProfileStringA
TlsFree
HeapFree
GetCurrentThreadId
IsDBCSLeadByte
GetTempFileNameA
SetLastError
GetThreadPriority
HeapDestroy
GetStringTypeA
OutputDebugStringA
GetTimeZoneInformation
InitializeCriticalSection
GetCurrentProcess
GetTickCount
RtlUnwind
GetTempPathW
HeapReAlloc
SetEnvironmentVariableA

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathAddBackslashA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

user32

CharUpperA
CharNextA
MessageBoxA
wsprintfW
GetKeyState
wsprintfA
CharLowerA

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

deb4192e1b6aafb05c55a891947175bf

Headers

File Characteristics

Imports

kernel32

msimg32

shlwapi

advapi32

user32

Sections

.text Size: 144KB - Virtual size: 144KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 18KB - Virtual size: 17KB

.crt Size: 512B - Virtual size: 68KB

.text
Size: 144KB - Virtual size: 144KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 18KB - Virtual size: 17KB

.crt
Size: 512B - Virtual size: 68KB