Static task
static1
Behavioral task
behavioral1
Sample
20230429a9ffb98685c11dda69dfb87f7d7377f7virlock.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
20230429a9ffb98685c11dda69dfb87f7d7377f7virlock.exe
Resource
win10v2004-20230220-en
General
-
Target
20230429a9ffb98685c11dda69dfb87f7d7377f7virlock.bin
-
Size
300KB
-
MD5
a9ffb98685c11dda69dfb87f7d7377f7
-
SHA1
ae6393270db90513fe1532be35b7fce99038d7e7
-
SHA256
00c86721ba05fa6a4cf9eff3c46f5a049a6e3d04050e5eef75f84c9f7d9a6a39
-
SHA512
80d7e4594dd467070c77da8a000d00c67aeb2ff530180cbab5e7758aed5a65f34e2df9c24fb1f9c062e2673fda6216f0e94cd4bbba3951c3c22a078854824b96
-
SSDEEP
6144:t4/UxocAt3kgMX2vPnA6a6nUR8KMHKAnDGFsFGP81KHlVoTH6:t4/Uxvo3kgMX2vPnr/nURjMHKi10P8LG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20230429a9ffb98685c11dda69dfb87f7d7377f7virlock.bin
Files
-
20230429a9ffb98685c11dda69dfb87f7d7377f7virlock.bin.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 299KB - Virtual size: 298KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE