Static task
static1
Behavioral task
behavioral1
Sample
20230429aaed9928ab9307955ee3bf7d16007b9cvirlock.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
20230429aaed9928ab9307955ee3bf7d16007b9cvirlock.exe
Resource
win10v2004-20230221-en
General
-
Target
20230429aaed9928ab9307955ee3bf7d16007b9cvirlock.bin
-
Size
269KB
-
MD5
aaed9928ab9307955ee3bf7d16007b9c
-
SHA1
98fb5ec6c7ad6928fe9c15a39fc628a265decfc4
-
SHA256
1d11fb861027cbff0418522594705e1af00467c78f47646aca7d03490f4111f5
-
SHA512
569c7d3cd2c74e5468acb8217dc66e037ca2f0f1a660433b5d56eba7613da98dd98a246a724933bc9d4c69ff910c2d7b93d1d8c406b6e5eb51e661257415feb8
-
SSDEEP
6144:/hIaU2Xh0rF2Y6AUkNr8RYPYfwh/C80/m5msu2U7AhN3SdVUSo01I+cSLt0Bpg:9XhXLMr8RYPAlit+cUmg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20230429aaed9928ab9307955ee3bf7d16007b9cvirlock.bin
Files
-
20230429aaed9928ab9307955ee3bf7d16007b9cvirlock.bin.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 264KB - Virtual size: 263KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE