Virus[.]Hijack[.]ATA_virussign[.]com_9d156561d602f4ee3558711cb3db82ef[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Virus.Hijack.ATA_virussign.com_9d156561d602f4ee3558711cb3db82ef.exe
Size

67KB
MD5

9d156561d602f4ee3558711cb3db82ef
SHA1

22be48ea6731889bae4faa51f22210dcf629fb89
SHA256

2c4e7f04df7018e29470cc7653b3c560fea2e850f8305f951b0e7fe71d41b9ab
SHA512

34a14556726d580af34daa919ceb9ff9781624fa3ed32959572a26e5327b0401a6aff8079b73b217671f4847b843b806eba8fa7df334b400f6e6f5cde22e17d7
SSDEEP

1536:8mpTanZOYkO7xhouPc1KtQhNMsJifTduD4oTxw:8mAZOYX7xl4NMsJibdMTxw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Virus.Hijack.ATA_virussign.com_9d156561d602f4ee3558711cb3db82ef.exe

Files

Virus.Hijack.ATA_virussign.com_9d156561d602f4ee3558711cb3db82ef.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.reloc Size: 27KB - Virtual size: 27KB

.bss Size: - Virtual size: 132KB

.data Size: 11KB - Virtual size: 11KB

.text Size: 3KB - Virtual size: 3KB

.wixburn Size: 512B - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 12KB

.idata Size: 1024B - Virtual size: 4KB

.pdata Size: 4KB - Virtual size: 8KB

.idata Size: 1024B - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.rsrc Size: 5KB - Virtual size: 8KB

.idata Size: 1024B - Virtual size: 4KB

.reloc
Size: 27KB - Virtual size: 27KB

.bss
Size: - Virtual size: 132KB

.data
Size: 11KB - Virtual size: 11KB

.text
Size: 3KB - Virtual size: 3KB

.wixburn
Size: 512B - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 12KB

.idata
Size: 1024B - Virtual size: 4KB

.pdata
Size: 4KB - Virtual size: 8KB

.idata
Size: 1024B - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 5KB - Virtual size: 8KB

.idata
Size: 1024B - Virtual size: 4KB