Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_bbd7ef37db7c08e27f51969de68eadd1_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-13_bbd7ef37db7c08e27f51969de68eadd1_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-13_bbd7ef37db7c08e27f51969de68eadd1_virlock
-
Size
567KB
-
MD5
bbd7ef37db7c08e27f51969de68eadd1
-
SHA1
66872d76e3f98f84f25bfb5072b75a2ed5207dea
-
SHA256
454b33fc0aa8657e7773ed4e6f5a6bfa63f7de86e1eb9f091f8e9df0a3734f7c
-
SHA512
a2d35fa15f08e71728f86d6f3e7a530e00f2c18fe966b64de63987095d0b43808643965b66f6c70a6c6bfcf4e28b1d5b14d5e25eb9c45505269b13ceca9e80ec
-
SSDEEP
12288:SWTSqytdEuAX5XxCtdQ2qYorxPnzd4xpLcsyrmwGqTd:SC/6ipcbOY48aSLqTd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-13_bbd7ef37db7c08e27f51969de68eadd1_virlock
Files
-
2024-02-13_bbd7ef37db7c08e27f51969de68eadd1_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 562KB - Virtual size: 562KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE