Static task
static1
Behavioral task
behavioral1
Sample
202304293c9e90c428f3e421f006c225f52df04evirlock.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
202304293c9e90c428f3e421f006c225f52df04evirlock.exe
Resource
win10v2004-20230220-en
General
-
Target
202304293c9e90c428f3e421f006c225f52df04evirlock.bin
-
Size
944KB
-
MD5
3c9e90c428f3e421f006c225f52df04e
-
SHA1
a438e4db3a86436229db8cfadc0665bbefe6cf71
-
SHA256
74bcea3f664a5f6a2c57fe6a0e5406f3a7bf477271c0cedd585e9b0628fbda08
-
SHA512
9bfff05dabd6994df1c92a3028b4c706315e8c785a3116c048ce64dfe47ee1f423214c9c1deef9652c274d4f9293bd973e26a33f045a21b9060982d35a24a8d7
-
SSDEEP
24576:dReS/DSwf7fckFUAC4qGno3nWmt4L/a4DehwOrg1b9kiDI:7nL1C6no3nTt4Pd2g1xkr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 202304293c9e90c428f3e421f006c225f52df04evirlock.bin
Files
-
202304293c9e90c428f3e421f006c225f52df04evirlock.bin.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 943KB - Virtual size: 942KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE