Virus[.]Hijack[.]ATA_virussign[.]com_372427741b67705e3ef3b163a4368643[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Virus.Hijack.ATA_virussign.com_372427741b67705e3ef3b163a4368643.exe
Size

104KB
MD5

372427741b67705e3ef3b163a4368643
SHA1

98bb45002f3f11447934f4f7f067a0535a22d677
SHA256

6e908f3940006ba46cfebfa0afcd13346e337414bc269ccb5dbf53e55eb67975
SHA512

93339d7f0164ec4c0897895e7bb54171bb4382cd753a11eb7eb7dce8ddb4aafb7e6320c5183ee2c55b9481f78e3a879689488d20f8a9ddd24803fe7b899b72c1
SSDEEP

3072:roAKPxZFLmvUuveo2uE+h3+rJM++SYSUZCbCdW:roJFyvOoXEcAJN+SYSUZCbX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Virus.Hijack.ATA_virussign.com_372427741b67705e3ef3b163a4368643.exe

Files

Virus.Hijack.ATA_virussign.com_372427741b67705e3ef3b163a4368643.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.text Size: 45KB - Virtual size: 45KB

.text Size: - Virtual size: 122KB

.data Size: 12KB - Virtual size: 12KB

.pdata Size: 4KB - Virtual size: 4KB

.ajelhf Size: 512B - Virtual size: 4KB

.data Size: 5KB - Virtual size: 8KB

.rsrc Size: 8KB - Virtual size: 8KB

.idata Size: 512B - Virtual size: 4KB

.didat Size: 4KB - Virtual size: 8KB

.rsrc Size: 3KB - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.rsrc Size: 6KB - Virtual size: 8KB

.reloc Size: 9KB - Virtual size: 12KB

.idata Size: 512B - Virtual size: 4KB

.text
Size: 45KB - Virtual size: 45KB

.text
Size: - Virtual size: 122KB

.data
Size: 12KB - Virtual size: 12KB

.pdata
Size: 4KB - Virtual size: 4KB

.ajelhf
Size: 512B - Virtual size: 4KB

.data
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 8KB - Virtual size: 8KB

.idata
Size: 512B - Virtual size: 4KB

.didat
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 3KB - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 6KB - Virtual size: 8KB

.reloc
Size: 9KB - Virtual size: 12KB

.idata
Size: 512B - Virtual size: 4KB