Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_077114cd7e7750df83acd38e89ed5b83_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-25_077114cd7e7750df83acd38e89ed5b83_virlock.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-25_077114cd7e7750df83acd38e89ed5b83_virlock
-
Size
110KB
-
MD5
077114cd7e7750df83acd38e89ed5b83
-
SHA1
e088b8a802fa11b0059ea56cfb224e8bba9ce232
-
SHA256
d5b4a86ad3dfb3e93133d570fb33debb3373073a6b2996ec094e9077312f401e
-
SHA512
bd6a5d09f091bf90ca68f82b7731a087b7d6cf0ef9489536b2c56892b00c97d7ad17ce8d58ccacd86b56cd32cac640cb3c933f341ed1a9003046309e30af3c0e
-
SSDEEP
3072:irmhwub45alOC3wsII71LO8X/2aEjSUvs8qd24:iJ4KW7tX/2aEjSusRdp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-25_077114cd7e7750df83acd38e89ed5b83_virlock
Files
-
2024-01-25_077114cd7e7750df83acd38e89ed5b83_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE