Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_bce6c02e42a54bf1bc5ee71756d0a604_virlock.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-25_bce6c02e42a54bf1bc5ee71756d0a604_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-25_bce6c02e42a54bf1bc5ee71756d0a604_virlock
-
Size
253KB
-
MD5
bce6c02e42a54bf1bc5ee71756d0a604
-
SHA1
9f3894ef1edf1a53817507f1ae16c4ffc0eeeb1f
-
SHA256
453f0742bdde60e9e7d39ad3bf6da736324c2617cf2a0b6be46f56f06fcada0f
-
SHA512
3952c5fced18a1bee9eab2b9287b1729422aabbef9b9f3ea3aa82d836a77f0ec2f06cca9372c6a9591f7ee4cebede690a8dad307cba385c94a0103c69517b1ac
-
SSDEEP
3072:Ne3ZAyBGN5tIuBMsuJ2Zk99Ctioq6+wLOTBZGrW/erN3tQCVnv+jbjGn1R9GDffM:Nee1N5tIuT4/jGn1nRL2XBG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-25_bce6c02e42a54bf1bc5ee71756d0a604_virlock
Files
-
2024-01-25_bce6c02e42a54bf1bc5ee71756d0a604_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE