Trojan[.]Autorun[.]ATA_virussign[.]com_135db4c64a6b4a27efa076ec2289df40[.]exe | Triage

Sharing

General

Target

Trojan.Autorun.ATA_virussign.com_135db4c64a6b4a27efa076ec2289df40.exe
Size

39KB
MD5

135db4c64a6b4a27efa076ec2289df40
SHA1

b13d6638314b59108276821b8d1ea529e4123565
SHA256

bbba923927a1db53ce06658cd42d4757ecbfbecfdf4135bedead83bd6a6be991
SHA512

caa48f868bb8f0b51cc9ad16edea8e5b7939c5c10daa036adc58b1b3760caa739da595d1b1b006a820204ae73dc15479c8a108ba4e3196fb32dcb2db25ecabbf
SSDEEP

768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Emkcg:e6q10k0EFjed6rqJ+6vghzwYu7vih9GF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Trojan.Autorun.ATA_virussign.com_135db4c64a6b4a27efa076ec2289df40.exe

Files

Trojan.Autorun.ATA_virussign.com_135db4c64a6b4a27efa076ec2289df40.exe
.exe windows:4 windows x86 arch:x86

23d47cbef5ef7b970f550a993e2e8f04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

advapi32

RegOpenKeyA

iphlpapi

GetAdaptersInfo

wininet

InternetOpenA

user32

wsprintfA

Sections

.MPRESS1
Size: 21KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 1021B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE