Static task
static1
Behavioral task
behavioral1
Sample
2024-01-10_bb61942176199892dbd50261416792bc_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-10_bb61942176199892dbd50261416792bc_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-10_bb61942176199892dbd50261416792bc_virlock
-
Size
159KB
-
MD5
bb61942176199892dbd50261416792bc
-
SHA1
99e4c3a46ec47acc02cd1a5050e3c0e142f6ec19
-
SHA256
a26934434f70e75d843902e5958d06f70dd43ba36a7a6e139bb6bd075ff2d192
-
SHA512
919abee0d008b591efd058afe712b85311a66a6256a4f455444bc2b3af53662fe9b4f6e82562c81e145baba26ffc8f68b0ed89900d177b7c50d0a9025216dd2b
-
SSDEEP
3072:QorVmCv+R0+SEl+kHKmvylb+geMynPLC5G8hfzmRevg/Ccr0t:QeVPv+R0+SS+kHK5+geMyPLC5GwfzmRu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-10_bb61942176199892dbd50261416792bc_virlock
Files
-
2024-01-10_bb61942176199892dbd50261416792bc_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE