Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_49fc6293dda35543dd7aaa732ab685c2_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-13_49fc6293dda35543dd7aaa732ab685c2_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-13_49fc6293dda35543dd7aaa732ab685c2_virlock
-
Size
147KB
-
MD5
49fc6293dda35543dd7aaa732ab685c2
-
SHA1
b33d1eb4f60d70572f3bf0f83434a01258f91e66
-
SHA256
0125d840a26d6d64a8f006a1c40e05c408abdebb0f0c46b7d488c138c97fba05
-
SHA512
501d7294942514b8e89a59350d1d97ade220e4df1a68eac30d9e52d069686070b0b2945e708a49cb7f7bfe71915aff3e28181105978e74f50dfcec25cceca95f
-
SSDEEP
3072:gkiK+SRzHNZzbL52dZbhBbE4QPjzzsanr6wfWFh1jH:gkvRTjz0dZbhdxmftrYx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-13_49fc6293dda35543dd7aaa732ab685c2_virlock
Files
-
2024-02-13_49fc6293dda35543dd7aaa732ab685c2_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE