Static task
static1
Behavioral task
behavioral1
Sample
2024-01-18_85aebf4828ff18dd7db4703866283312_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-18_85aebf4828ff18dd7db4703866283312_virlock.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-18_85aebf4828ff18dd7db4703866283312_virlock
-
Size
215KB
-
MD5
85aebf4828ff18dd7db4703866283312
-
SHA1
2bb71b280af8e4fd8456c0b83308f3e0cba2fe82
-
SHA256
c40f3c136f0b08335a0e1b53020af755e25672df3292050227e276c298f51f47
-
SHA512
1c3f07b3143d3c39bb8776f57356af0bbea9d547701b62be4125920e5af4e236493415c9447098624f91f426874ef2b6e22f84038f1ce96e0bb8942cd7d199a0
-
SSDEEP
6144:xUdVDqkrXvEAmnDrwQpvE9ZeyqNRDAUMGVGiQ8Cyo3:x4Jr/XeDMQpvE9ZbqNRAlGVGsCyQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-18_85aebf4828ff18dd7db4703866283312_virlock
Files
-
2024-01-18_85aebf4828ff18dd7db4703866283312_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 214KB - Virtual size: 213KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE