Static task
static1
Behavioral task
behavioral1
Sample
2024-02-04_33ddf663797e536e555cd8ba7be1d6a9_virlock.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-04_33ddf663797e536e555cd8ba7be1d6a9_virlock.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-02-04_33ddf663797e536e555cd8ba7be1d6a9_virlock
-
Size
139KB
-
MD5
33ddf663797e536e555cd8ba7be1d6a9
-
SHA1
145c79f81f3945ea64dca219fbb4a0fd9d5fcd32
-
SHA256
403be81c8f1d91ac9e0fa4c5b7b9a28caea1dd67b7c28c6fd4700ba9c68fee51
-
SHA512
ab02b01372cbb7b5e13b2c0ae205a7a99e3c1109888cb2c8b8b6c6eae82dbf17b21fc20863ff132876e8b5ece648ec6df7ac574ffb2e5cfb57475c6c65d22e29
-
SSDEEP
3072:5x5jhhP1PLjFMBo0kSMiGXpg6B9C2xuhDGBHDpdxGjppDVsLx6hDpDdxfpD9XF16:57lZTT/Zgo1ezSwhqH8Ha
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-04_33ddf663797e536e555cd8ba7be1d6a9_virlock
Files
-
2024-02-04_33ddf663797e536e555cd8ba7be1d6a9_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE