Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_e63bd07231f56b1b8c3de9d53f5cf1d4_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-13_e63bd07231f56b1b8c3de9d53f5cf1d4_virlock.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-02-13_e63bd07231f56b1b8c3de9d53f5cf1d4_virlock
-
Size
256KB
-
MD5
e63bd07231f56b1b8c3de9d53f5cf1d4
-
SHA1
d7d3a19d8202479d054fdcc41a2588587954e5db
-
SHA256
57553e6cfc8f4e70978b5af5eb9d349a0a195b2008af0dcd2f5bec2fc7b50e4b
-
SHA512
9748f25aacf2666fc91bd423c4ae08249f63969e535ad138e8cebca56ae8d79c5b106f2ec9f1b428b95901c241e03088a92a4145a6ef6a9371573a9b356551ac
-
SSDEEP
3072:BGnKVbXlPIH98kfsr0V2rsJuMdFxZDLsdanXb2W1yavTC:rJIyXr0VosJuMdFbLsdcb73vG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-13_e63bd07231f56b1b8c3de9d53f5cf1d4_virlock
Files
-
2024-02-13_e63bd07231f56b1b8c3de9d53f5cf1d4_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 251KB - Virtual size: 250KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE