Static task
static1
Behavioral task
behavioral1
Sample
2024-01-08_282b18370af1ee7187e5743d0389a017_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-08_282b18370af1ee7187e5743d0389a017_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-08_282b18370af1ee7187e5743d0389a017_virlock
-
Size
225KB
-
MD5
282b18370af1ee7187e5743d0389a017
-
SHA1
83f43a118d4ed06dedab5428dbe18f54d1a3d363
-
SHA256
5e8d30c11c98301e2ef80f3a8d810c5bbe65a69113b4068270c265151b504a3a
-
SHA512
946dc59c4921f10174e1763e4e819d66a6815270aa892f6644dae8ff1a24433db842bdfdbf595f83419949c58075b03cf60f11fe1c5483828611defb440d3002
-
SSDEEP
3072:HHN9RGptAhAlL6jKLCGl0NSqa6kHdBnGran6TiZex9GarLi8nL7tghti8ncPazV5:H9GptAlknGrN/H48viNcP9aWa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-08_282b18370af1ee7187e5743d0389a017_virlock
Files
-
2024-01-08_282b18370af1ee7187e5743d0389a017_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE