Static task
static1
Behavioral task
behavioral1
Sample
20230429c4180c4cfdfccba5d63f4fc75d6709bevirlock.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
20230429c4180c4cfdfccba5d63f4fc75d6709bevirlock.exe
Resource
win10v2004-20230220-en
General
-
Target
20230429c4180c4cfdfccba5d63f4fc75d6709bevirlock.bin
-
Size
269KB
-
MD5
c4180c4cfdfccba5d63f4fc75d6709be
-
SHA1
4ce33b3f47f0e7f3ca2868bceabb9c066558d846
-
SHA256
14cdda84fd4995649f421f90850632617cc5d8eaa71a24a70a8e36f232c9b8f1
-
SHA512
4f4d40ea4c118157e809f354280ef6941e3de9071280cf1e2a95365e52487d0b6b69acd5aab10953c7df8a27a563610031c1f63a4b425c122bd4a2d89ac64297
-
SSDEEP
6144:v4wavaK4RYFJFg1fqJmUHl8E7+F5DfmXfh3:veCK4oFB8n3KXfF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20230429c4180c4cfdfccba5d63f4fc75d6709bevirlock.bin
Files
-
20230429c4180c4cfdfccba5d63f4fc75d6709bevirlock.bin.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE