Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_ba25f39c2245cf12f8e6fce98d244f14_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_ba25f39c2245cf12f8e6fce98d244f14_virlock.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-02-12_ba25f39c2245cf12f8e6fce98d244f14_virlock
-
Size
565KB
-
MD5
ba25f39c2245cf12f8e6fce98d244f14
-
SHA1
2fd458dee57482286f67a92923023e0b6b9ea76c
-
SHA256
a17e7609c4cdd50cca3596fe205d9b1d13ba375196e98e091b6288fddb854957
-
SHA512
c4bb520bd51692ede66e5c21264f5ceb22cab660d023c7e7055773fc73ed6399e6d7e06d4950a418b9bb76c2e365bf9bd4cfe00686685676ce2df5aa77bda105
-
SSDEEP
12288:VE/uLVoprixP5WYfdCxRw4M5PXYaePUejZeSWQkqunsb4PSfvCSOtg:Vwvp2xhTlCxRTMGaesejkqunsb4PSfvH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-12_ba25f39c2245cf12f8e6fce98d244f14_virlock
Files
-
2024-02-12_ba25f39c2245cf12f8e6fce98d244f14_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 564KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE