2024-06-20_b42ed8229acc091f01c4ebc36887ea3f_virlock | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-20_b42ed8229acc091f01c4ebc36887ea3f_virlock
Size

713KB
MD5

b42ed8229acc091f01c4ebc36887ea3f
SHA1

208669291b14067d32030cb33a20827cd6ffbc23
SHA256

76280bfffcdb3011c561fbbfa9f3aa2fae3e9b2d39b63e05d534bd1ee40163af
SHA512

ba3c7073618c496abde06facd4cff16d0796f0275cf7d94416552838c72e9f4f4d4a2973703a82c741f39e468944d9192dee4e9fcc8f68674075000750518cca
SSDEEP

12288:/fFKxQkg1fvwoiYE0N006AeO0rMLk692tKmAy85Ye9RObvf143e4L38knBokg:/fFfkg1fi0Waey8/AUe9RObvk/L3tBol

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-20_b42ed8229acc091f01c4ebc36887ea3f_virlock

Files

2024-06-20_b42ed8229acc091f01c4ebc36887ea3f_virlock
.exe windows:4 windows x86 arch:x86

48c88c73ef60f077540e75dcba9fd9b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToDosDateTime
GetConsoleProcessList
DebugBreakProcess

advapi32

QueryAllTracesW

user32

ExcludeUpdateRgn
GetDesktopWindow
GetDialogBaseUnits
WINNLSGetIMEHotkey

Sections

.text
Size: 709KB - Virtual size: 712KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE