Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_b7ebc7978b4245497b486e41bfa94b85_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-25_b7ebc7978b4245497b486e41bfa94b85_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-25_b7ebc7978b4245497b486e41bfa94b85_virlock
-
Size
208KB
-
MD5
b7ebc7978b4245497b486e41bfa94b85
-
SHA1
513472b412a79b745f40f7fc0e24e38df23750ae
-
SHA256
aac18a3c24ff00dea6849b8a5460a176eab64e1c59e292cf7cb5f1fa4215f79a
-
SHA512
d1231c19d213c2bb82fb883376dd4b307ff40b0ee133a14b5717f23c1f5f592a87e5b45f6ab1ccf8f7080576e3390fca5ac72d94ecdab7965ab8f85546aee2d6
-
SSDEEP
6144:nRFgQwyQ9NJtt4Ob8ti+ku3OOMqNURkqY:nR1wyQ9zC4JOMOURkqY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2024-01-25_b7ebc7978b4245497b486e41bfa94b85_virlock
Files
-
2024-01-25_b7ebc7978b4245497b486e41bfa94b85_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 203KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE