2024-02-19_9340ca5c5503cd135958f64de58f6bcb_virlock | Triage

Sharing

General

Target

2024-02-19_9340ca5c5503cd135958f64de58f6bcb_virlock
Size

3.7MB
MD5

9340ca5c5503cd135958f64de58f6bcb
SHA1

cec151a56f0477c2b66a57159a05e492a0e7c42a
SHA256

e84c5a6e36926f5b528e069f8f7590aae6a1b38fc8dfd1492f023c15edd2f537
SHA512

de5676248df77fe8d45e19dfb8615eb3c789aeb9dd5c454f236ad1a4266d8786c278e8ed03fe081a9bbadc3f88823f1756365cd50eef17141a26123c3b90e2f4
SSDEEP

49152:8UUVCmgh3KGXgzLaZdV3QN+E2iPzGFp1jOrwGN3GmmF0+MO/kEPYC3yTsG:r1haOZon2YzEROsT0X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-19_9340ca5c5503cd135958f64de58f6bcb_virlock

Files

2024-02-19_9340ca5c5503cd135958f64de58f6bcb_virlock
.exe windows:4 windows x86 arch:x86

87052eb3567e98990b6f074373663387

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultUILanguage
VirtualAlloc

user32

GetMessageTime
GetCapture

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE