Virus[.]Hijack[.]ATA_virussign[.]com_d65a04a19c8b1a91b13d6e97bc1ae3db[.]exe | Triage

Sharing

General

Target

Virus.Hijack.ATA_virussign.com_d65a04a19c8b1a91b13d6e97bc1ae3db.exe
Size

74KB
MD5

d65a04a19c8b1a91b13d6e97bc1ae3db
SHA1

14832831a4b4cf65fee673e319bdf91c2a889d55
SHA256

55e5c1803a2076016d9c32cabd1193cafd01141522d31e2e3640e198bdaccec3
SHA512

a73a9e37878516f971a2171a5543d990d70abb8ad7c94916493ab59c0c7cc257bb3ab3d144bad6d1400b3cacf298af2b5f0eed69abe406557676d6f1cb86185e
SSDEEP

1536:y1Gjj3cUYLHnvk87oKwj3CQ48nOv444tWh+l/UFl53zA244E1k1pyRA:LfcVLP5bw748Ov44YNUFTw1wpyR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Virus.Hijack.ATA_virussign.com_d65a04a19c8b1a91b13d6e97bc1ae3db.exe

Files

Virus.Hijack.ATA_virussign.com_d65a04a19c8b1a91b13d6e97bc1ae3db.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ