Virus[.]Hijack[.]ATA_virussign[.]com_2815837c65fb16ef6d4620f5e436d66e[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Virus.Hijack.ATA_virussign.com_2815837c65fb16ef6d4620f5e436d66e.exe
Size

123KB
MD5

2815837c65fb16ef6d4620f5e436d66e
SHA1

b9492b8a1ac449689a4d6c73326b46ec6a30aa3c
SHA256

125a58383949346adc2fcc0385430f63df6f317049171d199dd76712c95170d7
SHA512

a67008d730a82e550343b940463cb76fd69d03eeafb65cebd1d621bd715b2522443c1115c59bea22086474c523ac46259ec7895d87a6ef89e80347b111657679
SSDEEP

3072:oLQ5qG+/0ZS/kTXVFdPWIxTGxwwWw7RYSa9rR85DEn5k7rRr:ooZ+/0Zu0XZWItGB774rQD85k/Rr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Virus.Hijack.ATA_virussign.com_2815837c65fb16ef6d4620f5e436d66e.exe

Files

Virus.Hijack.ATA_virussign.com_2815837c65fb16ef6d4620f5e436d66e.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.retplne
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.retplne Size: 51KB - Virtual size: 51KB

.bss Size: - Virtual size: 122KB

.reloc Size: 13KB - Virtual size: 13KB

.reloc Size: 4KB - Virtual size: 4KB

.flh Size: 512B - Virtual size: 4KB

.idata Size: 1024B - Virtual size: 4KB

.reloc Size: 5KB - Virtual size: 8KB

.rsrc Size: 9KB - Virtual size: 12KB

_RDATA Size: 512B - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.rdata Size: 6KB - Virtual size: 8KB

.reloc Size: 5KB - Virtual size: 8KB

.reloc Size: 9KB - Virtual size: 12KB

.rsrc Size: 9KB - Virtual size: 12KB

.rdata Size: 3KB - Virtual size: 4KB

.retplne
Size: 51KB - Virtual size: 51KB

.bss
Size: - Virtual size: 122KB

.reloc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 4KB - Virtual size: 4KB

.flh
Size: 512B - Virtual size: 4KB

.idata
Size: 1024B - Virtual size: 4KB

.reloc
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 9KB - Virtual size: 12KB

_RDATA
Size: 512B - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB

.rdata
Size: 6KB - Virtual size: 8KB

.reloc
Size: 5KB - Virtual size: 8KB

.reloc
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 9KB - Virtual size: 12KB

.rdata
Size: 3KB - Virtual size: 4KB