Static task
static1
Behavioral task
behavioral1
Sample
202304298f841f73283b550e447ff1e2f4c2e68cvirlock.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
202304298f841f73283b550e447ff1e2f4c2e68cvirlock.exe
Resource
win10v2004-20230220-en
General
-
Target
202304298f841f73283b550e447ff1e2f4c2e68cvirlock.bin
-
Size
202KB
-
MD5
8f841f73283b550e447ff1e2f4c2e68c
-
SHA1
ab13329c4292c2fc8dfd73fe3a32fbfe1a519c9a
-
SHA256
428b4f02d7a535adcd20bf3b779b38dff51eed418af836f2f0750baccfc0ab23
-
SHA512
1571d323bcd9474bc208875b4f1ae7edd5d4d4840b0feabcea378a24809c20b820acf42107b10031683904ff05f8206d954f9dfec0a78e01a9096e1c07a7a061
-
SSDEEP
6144:XU5t8uSww5nceIUAeAFD9rR3dBNHt/00K7dS467zGYYwrFw7:kNSww5nceIXd3NHt/2o4STYwC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 202304298f841f73283b550e447ff1e2f4c2e68cvirlock.bin
Files
-
202304298f841f73283b550e447ff1e2f4c2e68cvirlock.bin.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 201KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE