Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_5bec22a37485fc356ab0e07d5da86ed0_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-25_5bec22a37485fc356ab0e07d5da86ed0_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-25_5bec22a37485fc356ab0e07d5da86ed0_virlock
-
Size
210KB
-
MD5
5bec22a37485fc356ab0e07d5da86ed0
-
SHA1
adc6f21fdf62b0e999b2e421f96b883526433f11
-
SHA256
d7d79d03b689d4dbd8d63f67b3630b104915c7bdcc4448c2e8d885219f692c1c
-
SHA512
4c8e2726fc03b2a8aea5904c927e1e1e9ac6f6973ced4228b18432a7cb19a1a3e1918cabf8ec84c71712df9eae0df4c87b134aba50c77f164ebbf3213c62ddb2
-
SSDEEP
3072:oV2125aWbzhME0WSnbhrGhv6f6Nh8A/yiaYS2WHYpa7BK/7j9Du4ErcdKOXHgJhd:exhA9ntKI8uY3ra7BK/7BDuLiKWgJhd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-25_5bec22a37485fc356ab0e07d5da86ed0_virlock
Files
-
2024-01-25_5bec22a37485fc356ab0e07d5da86ed0_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE