2024-02-19_947058fc6e134da475c97567d122a314_virlock | Triage

Sharing

General

Target

2024-02-19_947058fc6e134da475c97567d122a314_virlock
Size

2.3MB
MD5

947058fc6e134da475c97567d122a314
SHA1

91c9e5138e2c1afa705f6efe15fdf707e4086e88
SHA256

80fbf482c4045c4b617f85b4e3db8897a236e07637af737aa520240841a9f169
SHA512

ffbd16fbe5aeb009af9f37eb2c35bb1af721d5a6223567f0bc7012cb1d83347bcf3e731a757772f2983e019eb0d9a9ef5b17b4120df9e0e97626b315fcbbb6f8
SSDEEP

24576:2+BQ/xzk2fuPSqbZED1BhVQy+ScRWeTAVZn+snUcmhKh5V9mLXpAMEittLZUq+Ai:25/KI2SltCRXTSxUcmPvbuqEG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-19_947058fc6e134da475c97567d122a314_virlock

Files

2024-02-19_947058fc6e134da475c97567d122a314_virlock
.exe windows:4 windows x86 arch:x86

fad25e87ce8274eef52d730ad7bea752

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

GetKBCodePage
GetProcessWindowStation

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE