2024-02-19_365a62c340b8d9e9a0121a79fe0d4ed2_virlock | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-19_365a62c340b8d9e9a0121a79fe0d4ed2_virlock
Size

2.4MB
MD5

365a62c340b8d9e9a0121a79fe0d4ed2
SHA1

0462461c3ea5a78defda61095b044c9201f9ec25
SHA256

a0326794e85cff1ec4bb16fdcd2bc19cc7d307af59aca78e89018d9b9441d76f
SHA512

8da82bd614051b54205efaf26058a4ba0ed28bc00881ea17e3d260457eb0cf8f01b2a40c494b3e90d347cdc183f1f9eda04a93341772622716e62a3412c9b52d
SSDEEP

24576:QNbNZiNvL+hfwlkcny3QEhlkmNHMks1MW3OEms3EfKcJ15ECVrpAgXR/ZXnz0QOK:8niFLyIlLE8WNsZUvZX9OJMp8ZYW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-19_365a62c340b8d9e9a0121a79fe0d4ed2_virlock

Files

2024-02-19_365a62c340b8d9e9a0121a79fe0d4ed2_virlock
.exe windows:4 windows x86 arch:x86

dba06b28abd38db4aacfdd7555187721

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
VirtualAlloc
GetUserDefaultLangID

user32

GetCapture

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE