Static task
static1
Behavioral task
behavioral1
Sample
2024-02-19_d3a0f043b1e7093d7eed9363ec688109_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-19_d3a0f043b1e7093d7eed9363ec688109_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-19_d3a0f043b1e7093d7eed9363ec688109_virlock
-
Size
230KB
-
MD5
d3a0f043b1e7093d7eed9363ec688109
-
SHA1
fced05cac6f43f17ebf21fe2af7611d3eb001835
-
SHA256
b98469fac25bfb0188e822290893b889e8b628e6d90f68767e1a2f1e681cd06c
-
SHA512
1543db0f4df175f174e26f09b5b2c6d9b65daf2bc7b99d882794f8af3d387eb36802a1a712ce8d0243510d768252bf4a613d3245dce10393905ddbd9e159f31a
-
SSDEEP
3072:RMnAIIofobWxhTFman1NVWUBJ6Z5SxfHXvmckmRa+fJXHbVy3RTJiEroEt8nYA/7:A5man13D50YJ3hy3S5ma/Oe0m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-19_d3a0f043b1e7093d7eed9363ec688109_virlock
Files
-
2024-02-19_d3a0f043b1e7093d7eed9363ec688109_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 225KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE