2023042987ceb689085b13058f52f9a3ca4c57c4virlock[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2023042987ceb689085b13058f52f9a3ca4c57c4virlock.bin
Size

2.1MB
MD5

87ceb689085b13058f52f9a3ca4c57c4
SHA1

5853baa293b0eba6b53dfed58c51d623db63dcc5
SHA256

ce1a55458c30512e5e8c55afececae3769c55c7611b92d713275d4e64b34f17b
SHA512

f377e74891e99031a28e575899949d4e0db4915bb790d9c03664bf77c2f2426d38e7937afbd399c96a8ab92413d835b94b963c1283ba59ee73a5daaea39a9929
SSDEEP

24576:IQ8xiwzxLKreAyEof7V9gLKNYmP750GDkHsGUX7dFDT0Ui/J3pMFqVuqYviPgoRP:IQZuK47PP750GDfLTkltPgoWqeJ9VF1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023042987ceb689085b13058f52f9a3ca4c57c4virlock.bin

Files

2023042987ceb689085b13058f52f9a3ca4c57c4virlock.bin
.exe windows x86

2469e1edcfd5fde614cf0336af3c1fb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetUserDefaultLangID

user32

GetFocus
GetForegroundWindow

Sections

.text
Size: 792KB - Virtual size: 792KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE