Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_08ad143d3bd999a181d9b3dc1fe3713c_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_08ad143d3bd999a181d9b3dc1fe3713c_virlock.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-02-12_08ad143d3bd999a181d9b3dc1fe3713c_virlock
-
Size
255KB
-
MD5
08ad143d3bd999a181d9b3dc1fe3713c
-
SHA1
6c980b6ac1abb4bb8c281d65cdfc1a6498863edf
-
SHA256
0fd7dcf393a1baa92ef40d43de965b29752d0215ff78cbc19dbf05d3ef71a64f
-
SHA512
a93f20c8ddc5f2532b23fe10ed82b3491908f3202312eb8d8858327701632738aad6c1d72373744fb2c14a52c6a383988ec9f1a00245ba2b3ae29f9de4218a38
-
SSDEEP
3072:UJ/Q7uFhSdWsNSSUtbNU2WFSKKVa6kC56FjHcn9QA:uoaD4/NZUtbbHlI4QA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-12_08ad143d3bd999a181d9b3dc1fe3713c_virlock
Files
-
2024-02-12_08ad143d3bd999a181d9b3dc1fe3713c_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 250KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE