20230429cc2b7b741960041fc38a701de9d0d151virlock[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20230429cc2b7b741960041fc38a701de9d0d151virlock.bin
Size

2.1MB
MD5

cc2b7b741960041fc38a701de9d0d151
SHA1

1503dcd2f96fdc645da11b801cc2e987b95f5439
SHA256

8a77fe10e61adb25eb05e55aae777aa7f40f3415b16d09694bb7249af69ee39e
SHA512

bd2bed78153f48653c96df74daa4bd91af8a3863517b10c26eef050f282f963330b693959c8afb1805dda39e78c3bc4bd770ad85f1cdf36adb7cb396d08d7d08
SSDEEP

49152:hhujB2PmQIJEjOPcRrBzeVlx61IJpg2Rqg:WYP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20230429cc2b7b741960041fc38a701de9d0d151virlock.bin

Files

20230429cc2b7b741960041fc38a701de9d0d151virlock.bin
.exe windows x86

967e7641829a413150b2723ffbbc5356

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

GetKBCodePage
GetForegroundWindow
GetMessagePos

Sections

.text
Size: 712KB - Virtual size: 712KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE