Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_4c69670fa3358af6093319fee6b5b55f_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_4c69670fa3358af6093319fee6b5b55f_virlock.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-02-12_4c69670fa3358af6093319fee6b5b55f_virlock
-
Size
292KB
-
MD5
4c69670fa3358af6093319fee6b5b55f
-
SHA1
3bb6915ed210d25de2428d72aa7cd0d53ae44667
-
SHA256
02e27ab203ef18b5bd46b5d38bb89682c4f8d9fb97e161f887fa989c9003e04c
-
SHA512
b5d1203b07c8aaf3d2eb92e600a0bce740303e56194a145eafe687f56a9041c3f927b15993170ba0980f863135608de13837b1cc6f42adb0a5064cbc8f7c1663
-
SSDEEP
6144:8Fs+2YxCSTezwh2gc+CqetnuOWhUQK3CUWBo6mxIejsw:8hzxCSazwFc+CxtShjK3Cw6mmKh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-12_4c69670fa3358af6093319fee6b5b55f_virlock
Files
-
2024-02-12_4c69670fa3358af6093319fee6b5b55f_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 287KB - Virtual size: 287KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE