Static task
static1
Behavioral task
behavioral1
Sample
2024-02-20_17c207204984c01a6f66d475a3e62d80_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-20_17c207204984c01a6f66d475a3e62d80_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-20_17c207204984c01a6f66d475a3e62d80_virlock
-
Size
116KB
-
MD5
17c207204984c01a6f66d475a3e62d80
-
SHA1
65b9f39e8fc7fa476ce678d236cdf6c3664b938e
-
SHA256
609eb1b46acd381286824f2630c853664d0a2752b9f98d1ece7971de2b13f7b7
-
SHA512
27a615f1a19734edd49e7457954c53a81abede386d183a405e29be4fcf084988cc77ddefa793698eb92bec28181fa941eb82f0c9258fc1ea36ee412d48b01970
-
SSDEEP
1536:b7l1HU0a/yxII0S3wWO6fHhXootIPz1CCcFqEbhSkzlRSd7vEWPTsiAFIka7nT:bx1HnztNOcHhXodIrk6lE6WY0kS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-20_17c207204984c01a6f66d475a3e62d80_virlock
Files
-
2024-02-20_17c207204984c01a6f66d475a3e62d80_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE