Static task
static1
Behavioral task
behavioral1
Sample
202304294a44644cabf0e01148407a1797f04729virlock.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
202304294a44644cabf0e01148407a1797f04729virlock.exe
Resource
win10v2004-20230220-en
General
-
Target
202304294a44644cabf0e01148407a1797f04729virlock.bin
-
Size
201KB
-
MD5
4a44644cabf0e01148407a1797f04729
-
SHA1
2e2a7170162a92c0c537480856eb0b1fbd315b1b
-
SHA256
414d077ff6708ec751d52250fe22f13e6b2ba1cc5128926f60967a503f1bf58a
-
SHA512
5b73c82e585ac215c3f9aec18a33015afe850285d21ed0a335612195b2c5ffcae3c63cf4efb84ae7485fe68e0cb032d39bfc8090fb59b479bf2282ef896e1bc5
-
SSDEEP
6144:AOMgvWDwqiteMS+FFVycAj+1wwYrZihQyz1IDl3fFsGEQ000000bqNaeEbj:lMps3n82DA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 202304294a44644cabf0e01148407a1797f04729virlock.bin
Files
-
202304294a44644cabf0e01148407a1797f04729virlock.bin.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE