Static task
static1
Behavioral task
behavioral1
Sample
2024-01-28_438adc85f03e313699092afd7c1e6e37_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-28_438adc85f03e313699092afd7c1e6e37_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-28_438adc85f03e313699092afd7c1e6e37_virlock
-
Size
163KB
-
MD5
438adc85f03e313699092afd7c1e6e37
-
SHA1
17dab1bb96f527564cfb12041e37006eb0432c22
-
SHA256
8f1faf07af8390285ad8392ed6773ca85a3b1f460e4ceca9ba87fa54c0ffcae3
-
SHA512
71de47f5c852d20bc16616caac59835cd877ecbe1304ec448b9893c3f5e1a62ab74d5f539cdc710d417d2bfc37d43b1b9a5ff4eed8491c5ba4ddada598221c18
-
SSDEEP
3072:nPeyw8QeFHoBEpaC5dIuxIx1oiRz7mF24qOHUqbmMsHCgRdyZibhRrlP:nPOZgIBI5d96roiJ4NHUqijHCOeOHlP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-28_438adc85f03e313699092afd7c1e6e37_virlock
Files
-
2024-01-28_438adc85f03e313699092afd7c1e6e37_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE