2023042967c35e20a544f34b5a125e2dbbd527cevirlock[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2023042967c35e20a544f34b5a125e2dbbd527cevirlock.bin
Size

4.7MB
MD5

67c35e20a544f34b5a125e2dbbd527ce
SHA1

13db5fa18b19dcc0ee6d6d3f3d5b53ed335d259d
SHA256

15ab27d6db92865f42c5559bcf588db30080b668f89fa7fc5cfb4d42405fa516
SHA512

878d21cd143eb9e64bee966741d8cd3ab27959a4a67e98adea53f4c63cf46b0313519fe55d53ffff82f37389a0e963f985686805fcd3f38f0b5695b2b3b80193
SSDEEP

98304:JFurtfTkfL7BfqB5VgBtpSAOIx0Q3bcLQnKI/eXWE:JsrhTECBrgHpSAOIqQL2QKMem

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023042967c35e20a544f34b5a125e2dbbd527cevirlock.bin

Files

2023042967c35e20a544f34b5a125e2dbbd527cevirlock.bin
.exe windows x86

8d867edabea06dc457bff7bb54e82a9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualAlloc
VirtualAlloc

user32

GetMessagePos
GetProcessWindowStation

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE