Virus[.]Hijack[.]ATA_virussign[.]com_cfb67e0d89ba5a723071db66c7f52c1b[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Virus.Hijack.ATA_virussign.com_cfb67e0d89ba5a723071db66c7f52c1b.exe
Size

427KB
MD5

cfb67e0d89ba5a723071db66c7f52c1b
SHA1

698d4e5939ca388743b5baa7b6ee1a4037e2902f
SHA256

641eba9375c24a2c840dcc0ba6bb0060e7f956b9925295fa28574bf65b5f8b31
SHA512

85d6252a9caa38655f93d29fe99c1b6fa419b80dec27d7ede6fd923dc37aa8a7608cf2afe838d85930adcddbc73062f46ae064e9eebe7e4afd9178d46c07984b
SSDEEP

1536:8QMBddDsESnB7nWYEyRMY3AMcYqfFhnrNARYSw1mir8CAjXoiDEuGg0opGCR9C:89d1o5lgFxrKRYSa9rR85DEn5k7rC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Virus.Hijack.ATA_virussign.com_cfb67e0d89ba5a723071db66c7f52c1b.exe

Files

Virus.Hijack.ATA_virussign.com_cfb67e0d89ba5a723071db66c7f52c1b.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.retplne
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.retplne Size: 51KB - Virtual size: 51KB

.rsrc Size: - Virtual size: 122KB

.reloc Size: 13KB - Virtual size: 13KB

.reloc Size: 4KB - Virtual size: 4KB

.flh Size: 512B - Virtual size: 4KB

.idata Size: 1024B - Virtual size: 4KB

.reloc Size: 5KB - Virtual size: 8KB

.reloc Size: 9KB - Virtual size: 12KB

_RDATA Size: 512B - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.rdata Size: 6KB - Virtual size: 8KB

.reloc Size: 5KB - Virtual size: 8KB

.reloc Size: 9KB - Virtual size: 12KB

.rsrc Size: 9KB - Virtual size: 12KB

.rdata Size: 3KB - Virtual size: 4KB

.retplne
Size: 51KB - Virtual size: 51KB

.rsrc
Size: - Virtual size: 122KB

.reloc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 4KB - Virtual size: 4KB

.flh
Size: 512B - Virtual size: 4KB

.idata
Size: 1024B - Virtual size: 4KB

.reloc
Size: 5KB - Virtual size: 8KB

.reloc
Size: 9KB - Virtual size: 12KB

_RDATA
Size: 512B - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB

.rdata
Size: 6KB - Virtual size: 8KB

.reloc
Size: 5KB - Virtual size: 8KB

.reloc
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 9KB - Virtual size: 12KB

.rdata
Size: 3KB - Virtual size: 4KB