General

  • Target

    2024-03-19_fb82ae7af6bc08c5961f9811a275136a_virlock

  • Size

    193KB

  • MD5

    fb82ae7af6bc08c5961f9811a275136a

  • SHA1

    6c573492fecf52d3db99e602ded1e0b389355bcb

  • SHA256

    3f7a79fd82a712a966335477c8cae9a25e743faf869e374bad7450f9fc19ebb1

  • SHA512

    189b78f96a315d2dfbcd67b45914f9606f7cb4f071897f4c692851af396b7b61df9123783c49a74817982da28f9c5940273f3eee0a7f4481b887b8346af57db3

  • SSDEEP

    3072:pceBnTdDCF0pNhW+qgaj/lAlw/0OnOsT6PIL+lVU3/Fkg+hXYAtokCBhbOcExoL2:aHkNY+qljdAKFROPdevp+dYBZTOceCI

Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-19_fb82ae7af6bc08c5961f9811a275136a_virlock
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections