Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_8aaac532fac4b7167419b08e9bbc3f99_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-25_8aaac532fac4b7167419b08e9bbc3f99_virlock.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-25_8aaac532fac4b7167419b08e9bbc3f99_virlock
-
Size
136KB
-
MD5
8aaac532fac4b7167419b08e9bbc3f99
-
SHA1
b33b96fd11c3581cda9aa717f6545edc7d81a145
-
SHA256
3dec2dd24653fff1949237f6064f2e0dc4ec3b171ae6c697522a43ef686bd005
-
SHA512
c9a7108302e5427f23ff7fa7715ddac8e0a9a6bc4678923fbc5673f3503bf7ce7ea7c2f1c336c0e624f5eb7174af653aed12099f59f072fba292e4769a099976
-
SSDEEP
3072:8vIdGA5SDYQJcfsGuRxk38JDFpSbH+7BpVeX:ZB0nJvRC38t3l7V0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-25_8aaac532fac4b7167419b08e9bbc3f99_virlock
Files
-
2024-01-25_8aaac532fac4b7167419b08e9bbc3f99_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE