AI
Packed PE with key-stealing indicators
Local reference
Suspicious dependency
Inferred
Mal-ecule
O₂(As₂Co)Md₃(Bi₉Pa)
Empty-code PE with dominant packed loader section: virussign.com_a150f3e972fb9e81e8f3c5b8f8e367f0.vir:0x0
Empty-text PE with nonstandard high-entropy packing: virussign.com_a150f3e972fb9e81e8f3c5b8f8e367f0.vir:0x0
Empty text PE with minimal imports and high entropy: virussign.com_a150f3e972fb9e81e8f3c5b8f8e367f0.vir:0x0
| 0x0 | 4d5a90000300000004000000ffff0000 | MZ..............Empty-text PE with nonstandard high-entropy packing |
| 0x10 | b8000000000000004000000000000000 | ........@....... |
| 0x20 | 00000000000000000000000000000000 | ................ |
| 0x30 | 00000000000000000000000080000000 | ................ |
| 0x40 | 0e1fba0e00b409cd21b8014ccd215468 | ........!..L.!Th |
| 0x50 | 69732070726f6772616d2063616e6e6f | is program canno |
| 0x60 | 742062652072756e20696e20444f5320 | t be run in DOS |
| 0x70 | 6d6f64652e0d0d0a2400000000000000 | mode....$....... |
| 0x80 | 5045000064860900121f536a00000000 | PE..d.....Sj.... |
| 0x90 | 00000000f00022200b020e2900100100 | ......" ...).... |
| 0xa0 | 00e200000000000020ff450000100000 | ........ .E..... |
| 0xb0 | 00000080010000000010000000020000 | ................ |
| 0xc0 | 06000000000000000600000000000000 | ................ |
| 0xd0 | 00e05100000400000000000002006001 | ..Q...........`. |
| 0xe0 | 00001000000000000010000000000000 | ................ |
| 0xf0 | 00001000000000000010000000000000 | ................ |
| 0x100 | 0000000010000000a82e43007f000000 | ..........C..... |
| 0x110 | f0d74a002800000000c0510001040000 | ..J.(.....Q..... |
| 0x120 | 608451 | `.Q |
| 0x2f43cc | 1201753bbf6dcffb295dc88c930cc115 | ..u;.m..)]...... |
| 0x2f43dc | 053cc662a6a9a2fc3099a58b8ac8ac12 | .<.b....0....... |
| 0x2f43ec | 1cf8ab658de514f51bd51382a1841a1b | ...e............ |
| 0x2f43fc | 37b41d6c942179f202117e85b840771c | 7..l.!y...~..@w. |
| 0x2f440c | 2e70706bdb7d78e64d4d7f91f71c7608 | .ppk.}x.MM....v. |
| 0x2f441c | 612c717fc2b915e154891296eed81b0f | a,q.....T....... |
| 0x2f442c | 78e81c78e9f5a3e87fc5a49fc594ad06 | x..x............ |
| 0x2f443c | 53a4aa71f031ceef6601c998dc50c001 | S..q.1..f....P.. |
| 0x2f444c | 4a60c776774da1c0e17da6b75b2caf2e | J`.vwM...}..[,.. |
| 0x2f445c | cd1ca8596e89ccc7f8b9cbb042e8c229 | ...Yn.......B..) |
| 0x2f446c | d4d8c55e45c57aced3f57db969a47420 | ...^E.z...}.i.t |
| 0x2f447c | ff9473575c0117c9ca3110be70601927 | ..sW\....1..p`.' |
| 0x2f448c | e6501e50 | .P.P |
| 0x31a676 | 01000904000090000000a0c05100cc02 | ............Q... |
| 0x31a686 | 0000000000000000000070c351009100 | ..........p.Q... |
| 0x31a696 | 00000000000000000000cc0234000000 | ............4... |
| 0x31a6a6 | 560053005f0056004500520053004900 | V.S._.V.E.R.S.I. |
| 0x31a6b6 | 4f004e005f0049004e0046004f000000 | O.N._.I.N.F.O... |
| 0x31a6c6 | 0000bd04effe00000100020008000000 | ................ |
| 0x31a6d6 | d807020008000000d8073f0000000000 | ..........?..... |
| 0x31a6e6 | 00000400040002000000000000000000 | ................ |
| 0x31a6f6 | 0000000000002a020000010053007400 | ......*.....S.t. |
| 0x31a706 | 720069006e006700460069006c006500 | r.i.n.g.F.i.l.e. |
| 0x31a716 | 49006e0066006f000000060200000100 | I.n.f.o......... |
| 0x31a726 | 30003800300039003000340062003000 | 0.8.0.9.0.4.b.0. |
| 0x31a736 | 000042001100010043006f006d007000 | ..B.....C.o.m.p. |
| 0x31a746 | 61006e0079004e0061006d0065000000 | a.n.y.N.a.m.e... |
| 0x31a756 | 00003300440063006f00720065006100 | ..3.D.c.o.r.e.a. |
| 0x31a766 | 6300740069006f006e002e0063006f00 | c.t.i.o.n...c.o. |
| 0x31a776 | 6d000000000038000800010046006900 | m.....8.....F.i. |
| 0x31a786 | 6c006500440065007300630072006900 | l.e.D.e.s.c.r.i. |
| 0x31a796 | 7000740069006f006e00000000003300 | p.t.i.o.n.....3. |
| 0x31a7a6 | 4400200043006f007200650000003600 | D. .C.o.r.e...6. |
| 0x31a7b6 | 0b000100460069006c00650056006500 | ....F.i.l.e.V.e. |
| 0x31a7c6 | 7200730069006f006e00000000003800 | r.s.i.o.n.....8. |
| 0x31a7d6 | 2e0032002e0032003000300038002e00 | ..2...2.0.0.8... |
| 0x31a7e6 | 3000000000003a000d00010049006e00 | 0.....:.....I.n. |
| 0x31a7f6 | 7400650072006e0061006c004e006100 | t.e.r.n.a.l.N.a. |
| 0x31a806 | 6d0065000000460069006c0065004300 | m.e...F.i.l.e.C. |
| 0x31a816 | 6f00720065002e0064006c006c000000 | o.r.e...d.l.l... |
| 0x31a826 | 00004a00130001004c00650067006100 | ..J.....L.e.g.a. |
| 0x31a836 | 6c0043006f0070007900720069006700 | l.C.o.p.y.r.i.g. |
| 0x31a846 | 68007400000043006f00700079007200 | h.t...C.o.p.y.r. |
| 0x31a856 | 69006700680074002000280043002900 | i.g.h.t. .(.C.). |
| 0x31a866 | 20003200300032003600000000004200 | .2.0.2.6.....B. |
| 0x31a876 | 0d0001004f0072006900670069006e00 | ....O.r.i.g.i.n. |
| 0x31a886 | 61006c00460069006c0065006e006100 | a.l.F.i.l.e.n.a. |
| 0x31a896 | 6d0065000000460069006c0065004300 | m.e...F.i.l.e.C. |
| 0x31a8a6 | 6f00720065002e0064006c006c000000 | o.r.e...d.l.l... |
| 0x31a8b6 | 0000320009000100500072006f006400 | ..2.....P.r.o.d. |
| 0x31a8c6 | 7500630074004e0061006d0065000000 | u.c.t.N.a.m.e... |
| 0x31a8d6 | 0000460069006c00650043006f007200 | ..F.i.l.e.C.o.r. |
| 0x31a8e6 | 6500000000003a000b00010050007200 | e.....:.....P.r. |
| 0x31a8f6 | 6f006400750063007400560065007200 | o.d.u.c.t.V.e.r. |
| 0x31a906 | 730069006f006e00000038002e003200 | s.i.o.n...8...2. |
| 0x31a916 | 2e0032003000300038002e0030000000 | ..2.0.0.8...0... |
| 0x31a926 | 00004400000001005600610072004600 | ..D.....V.a.r.F. |
| 0x31a936 | 69006c00650049006e0066006f000000 | i.l.e.I.n.f.o... |
| 0x31a946 | 00002400040000005400720061006e00 | ..$.....T.r.a.n. |
| 0x31a956 | 73006c006100740069006f006e000000 | s.l.a.t.i.o.n... |
| 0x31a966 | 00000908b004000000003c3f786d6c20 | ..........<?xml |
| 0x31adc0 | 00000000000000000000000000000000 | ................ |
| 0x31add0 | 00000000000000000000000000000000 | ................ |
| 0x31ade0 | 00000000000000000000000000000000 | ................ |
| 0x31adf0 | 00000000000000000000000000000000 | ................ |
| 0x31ae00 | 000000000000000000000000c487896b | ...............k |
Objectives
Metadata
Identity
| SHA-256 | 571d8a2d1cfc421c75a4e06fe78165350ee0db9f841c8ab87edd4fd08e9aa16b |
|---|---|
| Filename | virussign.com_a150f3e972fb9e81e8f3c5b8f8e367f0.vir |
| Package | 571d8a2d1cfc421c75a4e06fe78165350ee0db9f841c8ab87edd4fd08e9aa16b |
Origin
| Source | harvest |
|---|---|
| Feed | virussign |
| Domain | virussign.com |
Timeline
| First seen | 8 Aug 2026 14:42 UTC |
|---|---|
| First analyzed | 10 Aug 2026 08:14 UTC |
| Last analyzed | 10 Aug 2026 08:14 UTC |
| Last updated | 10 Aug 2026 08:14 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 73866 |
Not seeing what you expected? Let us know