Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_5716d9349e8c7e1b424e7caeeaf06023_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-13_5716d9349e8c7e1b424e7caeeaf06023_virlock.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-02-13_5716d9349e8c7e1b424e7caeeaf06023_virlock
-
Size
568KB
-
MD5
5716d9349e8c7e1b424e7caeeaf06023
-
SHA1
15ef25f88e82d9231156312cda3d9bb92b601a25
-
SHA256
4ed8c8d04d2f80d2161b8e68824412f9880053ba515d02b8c5fceaad5b5a863e
-
SHA512
5849496f955dd232e740781fa67fd2fb2a6e1184138f3176036499348b2a2beeb3d8a42b19ca142afbabf7c23d7afb5d308d6a1265c50dbe006fa94b293178cd
-
SSDEEP
12288:aesNTcd2sHFPOnRU41OktXq2fkFc9YUXkX38of5IL:/sW2sHFPelvtXSFc9Y6YVf5IL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-13_5716d9349e8c7e1b424e7caeeaf06023_virlock
Files
-
2024-02-13_5716d9349e8c7e1b424e7caeeaf06023_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 563KB - Virtual size: 563KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE