Static task
static1
Behavioral task
behavioral1
Sample
2024-02-17_8af5d8f940e0cc6bb2938c05032ba788_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-17_8af5d8f940e0cc6bb2938c05032ba788_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-17_8af5d8f940e0cc6bb2938c05032ba788_virlock
-
Size
333KB
-
MD5
8af5d8f940e0cc6bb2938c05032ba788
-
SHA1
71aad892e7645132a15f51d4f3300c27890ce9ec
-
SHA256
9aa0aa420a041d3c0f8ee2e98d13aa4d9bb892864c030f02a76b13073b31ffff
-
SHA512
e7fec426b205aa644bd079cf9df1329f7a2fbb2218071ce9a5d918183a206d409eff6fe9d3e2dc1ca8535fe6b9a4c2f9bc6d433e9a5d3c9252fec04f4963ee72
-
SSDEEP
6144:wIUyGptWbbq4X3L7wgi8Vj4orcBN0LP4BSdI1p:9G4X3nwgi24oMN0LPiSdI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-17_8af5d8f940e0cc6bb2938c05032ba788_virlock
Files
-
2024-02-17_8af5d8f940e0cc6bb2938c05032ba788_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 328KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE