Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_5ef6149e8003c90a6a4d65b1a8c1d690_virlock.exe
Resource
win7-20231215-en
General
-
Target
2024-01-25_5ef6149e8003c90a6a4d65b1a8c1d690_virlock
-
Size
110KB
-
MD5
5ef6149e8003c90a6a4d65b1a8c1d690
-
SHA1
eec7ea9f2f65e12512f58cb3df61edf1bfbf0a9e
-
SHA256
a3c87829ca6ad7f73efd714a3fc0f9d318703f848cee880693c283eec7155584
-
SHA512
db6ede884cfaa91b394f3d4bbfe606605c4b75675c21c3176f4fb21a916e66c91f3c0533afd071db356fe389ca4351180a11b99b62bdbbb70715010d9c3bcf40
-
SSDEEP
3072:t3WU41cTYuPbeZh45iMzjxfrsBnhOD6FFodt:tmUyiY+bYhTMzjxfrqOWW3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2024-01-25_5ef6149e8003c90a6a4d65b1a8c1d690_virlock
Files
-
2024-01-25_5ef6149e8003c90a6a4d65b1a8c1d690_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE