Static task
static1
Behavioral task
behavioral1
Sample
2024-01-09_6dafa8b50988ee1787dc6da92175dc2c_virlock.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-09_6dafa8b50988ee1787dc6da92175dc2c_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-09_6dafa8b50988ee1787dc6da92175dc2c_virlock
-
Size
375KB
-
MD5
6dafa8b50988ee1787dc6da92175dc2c
-
SHA1
896de8caef65f63b4943c88a36e17bc775066c92
-
SHA256
1e49dab9db4a4a118e87ee33a4a3837c09aae5fa5f499ec0b0060e21e68326de
-
SHA512
c21f53ead348b6ff411746a727c2f1aad67ee69cdc7b10290b7f3e531bb2a6ff466ff99a56f7480e5ae21bb39d3b54dfcd57df135d67eb1e8f413c12127b9958
-
SSDEEP
6144:VSWEVuF3hngH08RbhBCW+iEKevttj1w3p3mdo9vGB8hKCcIxLuSxF64zN1YJVQc:hfngH08VmW+4el839wo9vGBQBLuSvvY/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-09_6dafa8b50988ee1787dc6da92175dc2c_virlock
Files
-
2024-01-09_6dafa8b50988ee1787dc6da92175dc2c_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE