Static task
static1
Behavioral task
behavioral1
Sample
2024-02-29_f02668355105dc05d5c4835865313263_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-29_f02668355105dc05d5c4835865313263_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-02-29_f02668355105dc05d5c4835865313263_virlock
-
Size
191KB
-
MD5
f02668355105dc05d5c4835865313263
-
SHA1
ef5945e3c98736d97435a6ebce315daa15647b2e
-
SHA256
9b49df719b7d0f2b6b0e66d802c01de564fce786a66a23a2918c02793dd95273
-
SHA512
1d8f15278aeb63422650a0122378fa035d54135ffd32f3f8ec6298fb2c1c60e6b423b961dbc7df2ae29f2a8ebab47a915899b83ead3be01fdb5994177e3da7d2
-
SSDEEP
3072:CJ9UHb3nuMc6WlbrR5wPTOJthaysG9VTINcmGlOBJYLGJM9IQCqnM7/4S0CjhTmn:UC7zc6WlbrR5wPTOJtha5G9VTwWlOAOs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-29_f02668355105dc05d5c4835865313263_virlock
Files
-
2024-02-29_f02668355105dc05d5c4835865313263_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE