Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_224b66e303da1147bf17f1bbbad0712e_virlock.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-13_224b66e303da1147bf17f1bbbad0712e_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-13_224b66e303da1147bf17f1bbbad0712e_virlock
-
Size
254KB
-
MD5
224b66e303da1147bf17f1bbbad0712e
-
SHA1
772a535d3f9edfe67881c0bc44a85d682a4f3cfd
-
SHA256
512363a07204825173267f11181f8c25eb49d8e612071c15464c6a4edb623ac0
-
SHA512
76895a7b0e41e07677b592c79b36cfad580fe953f6fe7d28b34798b35bcfc1d3d28276126207e602d816b4fdbe272a03bf358de16cc86459f800d462b18a0bcb
-
SSDEEP
3072:GWn8vu6H7p3hNlxdbuQ+tGf0cy11Y8hYY4WjRw1KL7B4wA/3Je0xD0:r8THvxRuQ+e7wYY4WVXLbq0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-13_224b66e303da1147bf17f1bbbad0712e_virlock
Files
-
2024-02-13_224b66e303da1147bf17f1bbbad0712e_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 249KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE