2024-03-18_30f35abb620f150c5369388f44fd12b9_virlock | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-18_30f35abb620f150c5369388f44fd12b9_virlock
Size

713KB
MD5

30f35abb620f150c5369388f44fd12b9
SHA1

e1c0d25ee95fb2a08ac91350b55618521615e6fe
SHA256

8e3e5ac14539b37056ed2747cdcb0fedb7b7db5dd20f2639edf548a4d54e42c2
SHA512

8be436347142cf67fe5f2de56287ddc91f830f24fbd7b783251c17c375028cb2343c8f84a8342cffa032fa7c2f1513c4a191509e17ed9f16175ec5cbfb08fc8d
SSDEEP

12288:W8M7sG6vu/+96icdPkYM5mVzADYgbwUUUgeaffUVCBTvWxHKZIHmUTLte865pccz:W8M7sG6vihicLM5m+ENUUUgeifzBTvW8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-18_30f35abb620f150c5369388f44fd12b9_virlock

Files

2024-03-18_30f35abb620f150c5369388f44fd12b9_virlock
.exe windows:4 windows x86 arch:x86

6d9e368a5da249074c4308d2854da302

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VarDateFromI2

advapi32

GetSecurityDescriptorDacl

kernel32

GetCommandLineW
SignalObjectAndWait
GetConsoleTitleA
GetVersion

user32

CreateAcceleratorTableW
GetOpenClipboardWindow

Sections

.text
Size: 709KB - Virtual size: 712KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE