2024-04-23_e055731e985eb03b1978e6460fa85335_virlock | Triage

Sharing

General

Target

2024-04-23_e055731e985eb03b1978e6460fa85335_virlock
Size

714KB
MD5

e055731e985eb03b1978e6460fa85335
SHA1

9ae56a8f85804e1212df6c51b82f981fbbcdea3f
SHA256

8dec865b86d68f10d2992abf75912d465a4f6d661f0ed2e9d715ce5148a569f8
SHA512

4d94db2859396dfe6bef45c76ffbb03100a65df41f79afd4a6f10d85750e6c89f625f9f9c30f13addc8021844847e6961426579ad7c6ea47e8b2b880eeff1cf1
SSDEEP

12288:tgNqmctPwODs7d0OkGR1KHP/nubEc5wDq7G6RAB5An1pzlWTXR/Wn6uQLuuQLBy:tgyYOIZnk21KvZc5wWK6O5A1zWTe6udC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-23_e055731e985eb03b1978e6460fa85335_virlock

Files

2024-04-23_e055731e985eb03b1978e6460fa85335_virlock
.exe windows:4 windows x86 arch:x86

00b5bba20de2d6e0f0cf69ed443e74e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

EncryptedFileKeyInfo
BuildSecurityDescriptorW
SaferSetLevelInformation

ntdll

RtlAddAccessDeniedAceEx

user32

CopyImage
GetCaretBlinkTime

ole32

OleDuplicateData

kernel32

GetUserDefaultLCID
GetUserDefaultLangID

Sections

.text
Size: 710KB - Virtual size: 712KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE