Virus[.]Hijack[.]ATA_virussign[.]com_8641673a32bf63797226166ff511ea8e[.]exe | Triage

Sharing

General

Target

Virus.Hijack.ATA_virussign.com_8641673a32bf63797226166ff511ea8e.exe
Size

128KB
MD5

8641673a32bf63797226166ff511ea8e
SHA1

f4562b8f8291abc69bee843a2386bf2cabf76564
SHA256

f1207a3ef886c05ee29ff7d4d622fb1fb8b6d995f68874abd81bbe2ea65c8e18
SHA512

38310802490cdc2b2c9682a1236446662b9da8cd354b5be0e58cb4940e2f4adcaadc2d77e497eb1be9f3b4327a09ac053e1723ec6377b58cb2a5fc2b26c0f1af
SSDEEP

3072:+sU3NCm+q4XcFeMlCfFFUb3czM9KTMxbwf1nFzwSAJB8g:+DCmz4XkeMyUb3+M9KTMK1n6xJmg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Virus.Hijack.ATA_virussign.com_8641673a32bf63797226166ff511ea8e.exe

Files

Virus.Hijack.ATA_virussign.com_8641673a32bf63797226166ff511ea8e.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ