Static task
static1
Behavioral task
behavioral1
Sample
2024-02-29_2d52d7f29ec2b1470efc214d54c0962f_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-29_2d52d7f29ec2b1470efc214d54c0962f_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-02-29_2d52d7f29ec2b1470efc214d54c0962f_virlock
-
Size
210KB
-
MD5
2d52d7f29ec2b1470efc214d54c0962f
-
SHA1
2b7c2e6dec2bcae1886aed29337b4e05e4450715
-
SHA256
d51631ec1d31c835bfa817432a718327ed405141388a55cdd770ce1d24feeb5b
-
SHA512
59c93df1ad81577d7a52389655597d8fef3c42b74b60c57672bb3b76073dc573712363d0e57f1e525b8493ed4856e6afa82431370143cc635a5d46dc18062dfb
-
SSDEEP
3072:WmlKSifn/qYMNaiqyz+WwmA+TJWtN4XDNP9HyzRcbrVHPpMSolddGAjwNMILBCZV:Wmb4/qYMN3vz+zZ6Uz2LgRgrVHPIhjuc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-29_2d52d7f29ec2b1470efc214d54c0962f_virlock
Files
-
2024-02-29_2d52d7f29ec2b1470efc214d54c0962f_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE