Static task
static1
Behavioral task
behavioral1
Sample
2024-01-26_b8f41e0544263f6dcf28a1fbf9b5989a_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-26_b8f41e0544263f6dcf28a1fbf9b5989a_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-26_b8f41e0544263f6dcf28a1fbf9b5989a_virlock
-
Size
138KB
-
MD5
b8f41e0544263f6dcf28a1fbf9b5989a
-
SHA1
a1f9d9676c34715f95def7277c2178fcc406269c
-
SHA256
793205604ad630095f7bf888a84568c25eb4a778e39a303c926721a28ac2ac58
-
SHA512
ed1181290a7bc2cd269ed77e2af8ccf2ae2a70b7b86c1ee6397e1c1db366b5bdc33551fffedb5e594afaf235168511459d7d75626f71491cd689b86dc6cb8617
-
SSDEEP
3072:sQbMB5RduTBO7ciLXPMCJQo0sSVNtmEllNh9AMonC/LtzEX:sJ5gFij3GNtzUnCJ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-26_b8f41e0544263f6dcf28a1fbf9b5989a_virlock
Files
-
2024-01-26_b8f41e0544263f6dcf28a1fbf9b5989a_virlock.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE