Hostile 92% Download

virussign.com_428275c3b23836cf006666a8e977f740.vir

PE with injection APIs and self-replication

Generates randomized launched self-replicaWrites and launches a self-replica
SHA-256e314d5e9fa780771c701998f551f4be01cfce46dad2a55a4b0e6307c4f00d90a
URLhttp://samples.virussign.com/samples/virussign.com_20260829_LimitedFree.zip
MaleculeO₂(AsI)H₅(DbF₂MgOs₃Po₇)Md₃(Bi₄Pt)

Evidence

x86 e_lfanew to PE signature walk 0xb3bd–0xb47d
⋯3 more rows
0xb3ed9090908b44240431d26681384d5a750b....D$.1.f.8MZu.
0xb3fd03403c813850450000740889d0c32e8d.@<.8PE..t......
0xb40d74260031d2668178180b010f94c289d0t&.1.f.x........
⋯7 more rows
Split CPU vendor check 0x98f39–0x99059
⋯3 more rows
0x98f69000031c00fa285c00f849100000081fb..1.............
0x98f7947656e75740c81fb417574680f857d00Genut...Auth..}.
0x98f89000031dbb80100000089d90fa281e100..1.............
⋯3 more rows
0x98fc99c5a9d31d0a900002000743331c00fa2.Z.1.... .t31...
0x98fd985c0742b81fb41757468740881fb4765..t+..Autht...Ge
0x98fe96e75751bb80700000031c90fa281e300nuu......1......
⋯7 more rows
Generates randomized launched self-replica 0xcdd80–0xcdf20
⋯7 more rows
0xcddf000000000000000000000000000000000................
0xcde006d7574617465645f002e657865000000mutated_..exe...
0xcde10341a40002e194000ef194000ce1940004.@...@...@...@.
0xcde206e19400050194000ad1940008c194000[email protected].@...@...@.
0xcde30303030313032303330343035303630370001020304050607
⋯15 more rows
PE binary built with MinGW/GCC 0xd260a–0xd26fa
⋯3 more rows
0xd263a61646472657373202570000000002020address %p....
0xd264a5669727475616c50726f746563742066VirtualProtect f
0xd265a61696c6564207769746820636f646520ailed with code
0xd266a3078257800002020556e6b6e6f776e200x%x.. Unknown
0xd267a70736575646f2072656c6f636174696fpseudo relocatio
0xd268a6e2070726f746f636f6c207665727369n protocol versi
0xd269a6f6e2025642e0a0000002020556e6b6eon %d..... Unkn
0xd26aa6f776e2070736575646f2072656c6f63own pseudo reloc
⋯5 more rows
AddVectoredExceptionHandler API name reference 0xd2e63–0xd2f33
⋯3 more rows
0xd2e93640a006b65726e656c33322e646c6c00d..kernel32.dll.
0xd2ea3416464566563746f7265644578636570AddVectoredExcep
0xd2eb374696f6e48616e646c6572000052656dtionHandler..Rem
0xd2ec36f7665566563746f7265644578636570oveVectoredExcep
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.