Static task
static1
Behavioral task
behavioral1
Sample
2024-02-20_1b41e2c8382544129fe5f36143faa6f2_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-20_1b41e2c8382544129fe5f36143faa6f2_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-20_1b41e2c8382544129fe5f36143faa6f2_virlock
-
Size
254KB
-
MD5
1b41e2c8382544129fe5f36143faa6f2
-
SHA1
eccdc1d3eee94338a7338f79e5d68cc9f550d47e
-
SHA256
a21547527c0fd2d086cebcc9b95878f3547c162ee81b968257c4686a1a52e5b1
-
SHA512
1e8d4b2c4e708668ec69999f187bc00926e03b046349a189edcceea08bd4b8922830a76733eccb7930ba3b04107742541eb4da96465befbfd92e892846a0a540
-
SSDEEP
6144:hY/30Hgp8eFz6a2LaF2anV/H/3vnfX+5fIU1V2X6wk:el96H6V/H/3vnfX+5fIqVIm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-20_1b41e2c8382544129fe5f36143faa6f2_virlock
Files
-
2024-02-20_1b41e2c8382544129fe5f36143faa6f2_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 249KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE