Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_0b18597ff14208a1bc2d533e7447a643_virlock.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-25_0b18597ff14208a1bc2d533e7447a643_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-25_0b18597ff14208a1bc2d533e7447a643_virlock
-
Size
264KB
-
MD5
0b18597ff14208a1bc2d533e7447a643
-
SHA1
f9801bf8ebeb72fcf190b3dc39f2f5a5fff45fb7
-
SHA256
da43e00a1f40a2565b65990e83f26923a1888b1da6d633e4fc6087935f727f11
-
SHA512
9b284a1e6b5ffa9119d04836b16c39b9a06e6469e6475d60b9b8f56c243726dc1292bf9f28d839ce86380fe1990c22890d2b3a7dd90d6a609d47d6dba77954ce
-
SSDEEP
3072:JKLs+Kd27JHRk9JzjqLCThMIX2lI1x/wVyL+581lWS00yiqaTKaXpISvhiPHCM3D:JRtdudRk9JzmeThMpU4VyL+58BxKkZ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-25_0b18597ff14208a1bc2d533e7447a643_virlock
Files
-
2024-01-25_0b18597ff14208a1bc2d533e7447a643_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 249KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE