Static task
static1
Behavioral task
behavioral1
Sample
2024-03-05_316b1ddd5b5539ef6ddc57ef06a731d6_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-05_316b1ddd5b5539ef6ddc57ef06a731d6_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-05_316b1ddd5b5539ef6ddc57ef06a731d6_virlock
-
Size
155KB
-
MD5
316b1ddd5b5539ef6ddc57ef06a731d6
-
SHA1
17657aba698809dbb36b6a8f037b4cecd902afd6
-
SHA256
db631587a4e2f593a980e9add5a90962ce5092a5feee39c6790639893e1de916
-
SHA512
038a36f7439cf01c6d4d3cceaab9a9d1cf0fbc35d16f7e744140e1214538af6735075f7a8e6e2c946aa6f8081f188a8bcd21f23efaeec4177d5736fc38c46148
-
SSDEEP
3072:KC0AXICTr9/JsFXlpCwxtHQZ8rIRDETpZIp51W/hDLKop23vyvAWR2JnuGEG2KXv:KZAFr9Bs9mihXp2/yIWR2JnuGEfK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-05_316b1ddd5b5539ef6ddc57ef06a731d6_virlock
Files
-
2024-03-05_316b1ddd5b5539ef6ddc57ef06a731d6_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE