Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_3f8e647a121f2c3b0e92fabc6614f63c_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_3f8e647a121f2c3b0e92fabc6614f63c_virlock.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-02-12_3f8e647a121f2c3b0e92fabc6614f63c_virlock
-
Size
243KB
-
MD5
3f8e647a121f2c3b0e92fabc6614f63c
-
SHA1
0b443077ca933260a974833e7cfc70f1a1e2867c
-
SHA256
65fec225ebf7572b082e1b4d2987e2f82224b0fadab728ca79ae03dee7d1bbf9
-
SHA512
610ff51120cc23772e776e907629f8022261fe7a75d0a3709a7eab6e9af9a7d78f46d24d45164ede57d567134094f6dd3cb735d4e896989f576dc8872554321b
-
SSDEEP
6144:4gJsudjc7y/tNV+CiYBmLyPj7EESG05x6+ANdEjlJTk:44V2YtNYCiItPjQHV5x6TLUk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-12_3f8e647a121f2c3b0e92fabc6614f63c_virlock
Files
-
2024-02-12_3f8e647a121f2c3b0e92fabc6614f63c_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 238KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE