Static task
static1
Behavioral task
behavioral1
Sample
2024-01-28_debd0f6ff7d044d070cbc63026504ad7_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-28_debd0f6ff7d044d070cbc63026504ad7_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-28_debd0f6ff7d044d070cbc63026504ad7_virlock
-
Size
375KB
-
MD5
debd0f6ff7d044d070cbc63026504ad7
-
SHA1
81fd530bc8d71bf99b767fe04f6e3e3e0971aa7d
-
SHA256
3e99f34aecdefa65af503c75c18e77897f10fd7c52c9a81f9d1e904880f30986
-
SHA512
6cd13f95192e4cc6e848fce847173b7848cf4e3113a6f18f4c8afc046fbc1a76ff273189c666965227e012267b82a55b4a81c8a86a48b35899bdadafda5e70a1
-
SSDEEP
6144:lZaCJT96/GdTUFzxEyACcvKDQExp9S0VG6y2298j3WiyuF/2p:F6/AYzxEBYQExp9SPNUBI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-28_debd0f6ff7d044d070cbc63026504ad7_virlock
Files
-
2024-01-28_debd0f6ff7d044d070cbc63026504ad7_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 370KB - Virtual size: 369KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE