Virus[.]Hijack[.]ATA_virussign[.]com_f9e51dcb1bf083420da8c5de1fcd8793[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Virus.Hijack.ATA_virussign.com_f9e51dcb1bf083420da8c5de1fcd8793.exe
Size

128KB
MD5

f9e51dcb1bf083420da8c5de1fcd8793
SHA1

b6c1e101f3893fe7fc7619f4bc3af47198792fa6
SHA256

44c6d9eb1acc9d3b32e964d614ecccb9d1a71d1b3478688d4e9f0e86233aa901
SHA512

b56c59321035b3b704ccbc3b1f135808356f85ee6a31c85d12aa3146687434bc1ef00db0b340278f970d3056c8f9f8f3be9566d52a86d241a7973d9bf23b3828
SSDEEP

3072:7/C41gzcHOfsjn5wYuqinX9VGQkr3EznYfzB9BSwW:Z+sjni5XGr3YOzLc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Virus.Hijack.ATA_virussign.com_f9e51dcb1bf083420da8c5de1fcd8793.exe

Files

Virus.Hijack.ATA_virussign.com_f9e51dcb1bf083420da8c5de1fcd8793.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.text Size: 51KB - Virtual size: 51KB

.rsrc Size: - Virtual size: 122KB

.text Size: 13KB - Virtual size: 13KB

.idata Size: 4KB - Virtual size: 4KB

.flh Size: 512B - Virtual size: 4KB

.rsrc Size: 7KB - Virtual size: 8KB

.idata Size: 512B - Virtual size: 4KB

.text Size: 3KB - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.reloc Size: 5KB - Virtual size: 8KB

.rsrc Size: 2KB - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.text Size: 5KB - Virtual size: 8KB

.reloc Size: 5KB - Virtual size: 8KB

.rsrc Size: 6KB - Virtual size: 8KB

.idata Size: 512B - Virtual size: 4KB

.text
Size: 51KB - Virtual size: 51KB

.rsrc
Size: - Virtual size: 122KB

.text
Size: 13KB - Virtual size: 13KB

.idata
Size: 4KB - Virtual size: 4KB

.flh
Size: 512B - Virtual size: 4KB

.rsrc
Size: 7KB - Virtual size: 8KB

.idata
Size: 512B - Virtual size: 4KB

.text
Size: 3KB - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.reloc
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 2KB - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.text
Size: 5KB - Virtual size: 8KB

.reloc
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 6KB - Virtual size: 8KB

.idata
Size: 512B - Virtual size: 4KB