Static task
static1
Behavioral task
behavioral1
Sample
2024-02-02_c5f55903a1f172a08dfe680dd93f79d4_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-02_c5f55903a1f172a08dfe680dd93f79d4_virlock.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-02-02_c5f55903a1f172a08dfe680dd93f79d4_virlock
-
Size
163KB
-
MD5
c5f55903a1f172a08dfe680dd93f79d4
-
SHA1
ded61d63402089cf45b37596a6de09ace26348b6
-
SHA256
18d83bd2b428ee8e6de9d5d37059ddc75d100cc97264de337ac624fe231c255b
-
SHA512
2678e53f3c9ae29e4534e8b2bc693852da94e2ae2c1839ea68df312988ae73c02d2d0fdbadc109d976296781f9a33e5316a783520a3cf3d6176d2546807d1a49
-
SSDEEP
3072:WPzvUX4xmr3QC5V+dEseA6Y5d5izUnqSaVL3O2r5ddwcEsSN8UO0Dc7tL:WPrUIxO5V+dEhA6Y5d5iQq7VJWcZBGY5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-02_c5f55903a1f172a08dfe680dd93f79d4_virlock
Files
-
2024-02-02_c5f55903a1f172a08dfe680dd93f79d4_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE