Static task
static1
Behavioral task
behavioral1
Sample
2024-02-20_d2d13b81c6c52c4f29476c5afb55d1de_virlock.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-20_d2d13b81c6c52c4f29476c5afb55d1de_virlock.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-20_d2d13b81c6c52c4f29476c5afb55d1de_virlock
-
Size
903KB
-
MD5
d2d13b81c6c52c4f29476c5afb55d1de
-
SHA1
07e9844a5d9ac222fa88d997f0ccc37272296def
-
SHA256
1aab8a1689996d5f0c22f69b6199900878a5f0b371f20b95e360cbf4399d88d9
-
SHA512
e6103b404f7b3a5e7d2e7f74e8490d3b332388abee8e813043f72d5ad0f48b2634943741c6b02cb81d8c11feb92f57877356094eb47e5ed706d3e0cfd777e5ad
-
SSDEEP
24576:CSX8GpTspCOfTeap+cB7GlOcAzABByuoglQ4:CSX8GFsdfTviSeloa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-20_d2d13b81c6c52c4f29476c5afb55d1de_virlock
Files
-
2024-02-20_d2d13b81c6c52c4f29476c5afb55d1de_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 902KB - Virtual size: 902KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE