Static task
static1
Behavioral task
behavioral1
Sample
202304291e5ac23f0b62c3401fd2f62638bd3acevirlock.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
202304291e5ac23f0b62c3401fd2f62638bd3acevirlock.exe
Resource
win10v2004-20230220-en
General
-
Target
202304291e5ac23f0b62c3401fd2f62638bd3acevirlock.bin
-
Size
255KB
-
MD5
1e5ac23f0b62c3401fd2f62638bd3ace
-
SHA1
6ca1fdfbf840bd37dabe58890aceb98330cd47e5
-
SHA256
1f470d1f6e237c758398779e03231c38dd15d5e6a43cfdfe30f676ed0e903220
-
SHA512
9e575c47bd2ee2cc579b5af44ddebe1a3c29215639b86f8d0671afbecb023ea135d5d33dc8be40b51e724db73ae204f75c58dd8d747b63c2188297dec1d0d3a4
-
SSDEEP
6144:IZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZM:D85WewnDJFb9l3Map
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 202304291e5ac23f0b62c3401fd2f62638bd3acevirlock.bin
Files
-
202304291e5ac23f0b62c3401fd2f62638bd3acevirlock.bin.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 254KB - Virtual size: 254KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE