Static task
static1
Behavioral task
behavioral1
Sample
2024-02-18_23504162e14f2538be97a91a1ce17522_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-18_23504162e14f2538be97a91a1ce17522_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-18_23504162e14f2538be97a91a1ce17522_virlock
-
Size
204KB
-
MD5
23504162e14f2538be97a91a1ce17522
-
SHA1
4ff40500aa62ea9e3e0e66fc0113327e15f93b9f
-
SHA256
a0a618c6e41c8af8ef659c43786def67160c3ffc147e851f5c36d6bb2db40ac1
-
SHA512
88abca7483a3c12e804897211878fca83baddd16869ba7ebd001d5133ca51898ea21c31b34d1d4e55b66d4c4a758c78866b71e6f4bc7c9760f837a8e5440e2b2
-
SSDEEP
6144:ZcEAddb1+389bXFUFlXBLSON/YWF/DnK:pi1+s9bXFUFv7NV/r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-18_23504162e14f2538be97a91a1ce17522_virlock
Files
-
2024-02-18_23504162e14f2538be97a91a1ce17522_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 203KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE