Virus[.]Autorun[.]ATA_virussign[.]com_d0cea81f0f59b95b99419babff72b0e8[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Virus.Autorun.ATA_virussign.com_d0cea81f0f59b95b99419babff72b0e8.exe
Size

1.5MB
MD5

d0cea81f0f59b95b99419babff72b0e8
SHA1

a0c67a489a1712e8f5194d551841b06f3ffc66c7
SHA256

a952f597f2ea44f21a568c6557b48e458f8c0fb7f2255ad54ae17477b3c6eb61
SHA512

c22189e2bf915dd470bc46fe3d4e23b1e2fc164c24f389b345bef89e7b0c4e4007d8fd9389d3500811c148d5947b1f1c16570b2b02f122422a32220c3185c320
SSDEEP

12288:XMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9ECXjWsb0znha3NXjWsb0w:XnsJ39LyjbJkQFMhmC+6GD9p0yr0yR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Virus.Autorun.ATA_virussign.com_d0cea81f0f59b95b99419babff72b0e8.exe

Files

Virus.Autorun.ATA_virussign.com_d0cea81f0f59b95b99419babff72b0e8.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 818KB - Virtual size: 817KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ