Static task
static1
Behavioral task
behavioral1
Sample
2024-02-03_fbdd7f63ab368b9309268400b65f4e0a_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-03_fbdd7f63ab368b9309268400b65f4e0a_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-03_fbdd7f63ab368b9309268400b65f4e0a_virlock
-
Size
370KB
-
MD5
fbdd7f63ab368b9309268400b65f4e0a
-
SHA1
b38b8d3c37dc5d5f311e5eeea231ecd32cc3e214
-
SHA256
fefe5591e6d2982a36a9fcd973b4f5cdf6d0fd0ab806f0a91911b40b20e11b40
-
SHA512
55dbe0cf59eca9ffa421cc082d78e8ee6d23db3419c793ae8312e7df4bc3d74c2b1cd8a5bc3fdecb2061b4ae087c049a1eb53f78765297a677c5a6599bf40845
-
SSDEEP
6144:snHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHL:4HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-03_fbdd7f63ab368b9309268400b65f4e0a_virlock
Files
-
2024-02-03_fbdd7f63ab368b9309268400b65f4e0a_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 365KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE