valkyrie logo
valkyrie logo
  • Download Threat Hunter Assessment Tool
DASHBOARD
  • Unknown File Hunter Scans
STATISTICS
SETTINGS
  • Summary
  • Static Analysis
  • Dynamic Analysis
  • Precise Detectors
  • Human Expert Analysis
  • File Details
Analyzing...
File Name:   virussign.com_e0b3798eea5e217e17395bc1b09a43e2.exe
SHA1:   6a795c93e9c7bb913099b9bb5a997e9fab900f54
MD5:   e0b3798eea5e217e17395bc1b09a43e2
First Seen Date:  2026-04-03 21:58:10.073990 ( 2026-04-03 21:58:10.073990 )
Number of Clients Seen:   3
Last Analysis Date:  2026-04-05 12:26:01.005491 ( 2026-04-05 12:26:01.005491 )
Human Expert Analysis Date:  2026-04-04 19:52:52.697923 ( 2026-04-04 19:52:52.697923 )
Human Expert Analysis Result:   Clean

Analysis Summary

Analysis Type Date Verdict
Signature Based Detection 2026-04-05 12:26:01.005491 Malware
Static Analysis Overall Verdict 2026-04-05 12:26:01.005491 No Threat Found help
Dynamic Analysis Overall Verdict 2026-04-05 12:26:01.005491 No Threat Found help
Precise Detectors Overall Verdict 2026-04-05 12:26:01.005491 No Match help
Human Expert Analysis Overall Verdict 2026-04-04 19:52:52.697923 Clean

Static Analysis

Static Analysis Overall Verdict Result
No Threat Found help
Detector Result
Optional Header LoaderFlags field is valued illegal Clean
Non-ascii or empty section names detected Clean
Illegal size of optional Header Suspicious
Packer detection on signature database Unknown help
Based on the sections entropy check! file is possibly packed Clean
Timestamp value suspicious Clean
Header Checksum is zero! Clean
Enrty point is outside the 1st(.code) section! Binary is possibly packed Clean
Optional Header NumberOfRvaAndSizes field is valued illegal Clean
Anti-vm present Clean
The Size Of Raw data is valued illegal! Binary might crash your disassembler/debugger Clean
TLS callback functions array detected Clean

Dynamic Analysis

Dynamic Analysis Overall Verdict Result
No Threat Found help
Suspicious Behaviors
Has no visible windows

virussign.com_e0b3798eea5e217e17395bc1b09a43e2.exe tried to connect to some addresses pinned on the map below (click pins for more details):

Behavioral Information

QueryFilePath

C:\Windows\SysWOW64\rundll32.exe

Precise Detectors Analysis Results

Detector Name Date Verdict Reason
Static Precise PUA Detector 1 2026-04-05 12:25:51.355850 No Match help NotDetected
Static Precise PUA Detector 4 2026-04-05 12:25:51.376264 No Match help NotDetected
Static Precise NI Detector 3 2026-04-05 12:25:51.408283 No Match help NotDetected
Static Precise PUA Detector 5 2026-04-05 12:25:51.408797 No Match help NotDetected
Static Precise Trojan Detector 1 2026-04-05 12:25:51.460418 No Match help NotDetected
Static Precise Trojan Detector 3 2026-04-05 12:25:51.487438 No Match help NotDetected
Static Precise PUA Detector 6 2026-04-05 12:25:51.488838 No Match help NotDetected
Static Precise Trojan Detector 12 2026-04-05 12:25:51.540436 No Match help NotDetected
Static Precise Virus Detector 1 2026-04-05 12:25:51.556575 No Match help NotDetected
Static Precise Virus Detector 2 2026-04-05 12:25:51.573828 No Match help NotDetected
Static Precise NI Detector 1 2026-04-05 12:25:51.588081 No Match help NotDetected
Static Precise NI Detector 2 2026-04-05 12:25:51.620419 No Match help NotDetected
Static Precise Trojan Detector 13 2026-04-05 12:25:51.634666 No Match help NotDetected
Static Precise PUA Detector 2 2026-04-05 12:25:51.636237 No Match help NotDetected

Advance Heuristics

No Advanced Heuristic Analysis Result Received

Detector Result

Human Expert Analysis Results

Analysis Start Date:   2026-04-04 14:50:24.352567 ( 2026-04-04 14:50:24.352567 )
Analysis End Date:  2026-04-04 19:52:52.697923 ( 2026-04-04 19:52:52.697923 )
File Upload Date:  2026-04-03 21:57:40.597906 ( 2026-04-03 21:57:40.597906 )
Update Date:  2026-04-04 19:53:49.926877 ( 2026-04-04 19:53:49.926877 )
Human Expert Analyst Feedback:   None
Verdict:   Clean

Additional File Information

Vendor Validation

Certificate Validation

PE Headers

Property Value

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy MD5

PE Imports

PE Exports

PE Resources

© Verdict Cloud, Xcitium, Inc. 2026. All rights reserved. v1.49.0-72-ENT
 
 
 
 
Loading...