Static task
static1
Behavioral task
behavioral1
Sample
2024-03-07_94d6604984c84e3e2a552aa6383e76e5_virlock.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-03-07_94d6604984c84e3e2a552aa6383e76e5_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-07_94d6604984c84e3e2a552aa6383e76e5_virlock
-
Size
567KB
-
MD5
94d6604984c84e3e2a552aa6383e76e5
-
SHA1
b67dd79f7920a9e92961d5ddb430eecf469f016a
-
SHA256
d6f07b35b53397749062b11b0b0473d0cf6c4282db0a602ff87dc07229bc800d
-
SHA512
e3bbad8687cb06d8ee50db076c380161cb70a325c237c7550615e8d933d3fba2e47b4ff2b34589f2a791c4e3fe8e1e5ba89b79461c8052ec21e60ece5abc43aa
-
SSDEEP
6144:TQnqRG7U+RW+xQra87sD2c60Rcmq5QvMDZaELqGlzeYM+Yw2uhZ5Q6W/NmfBHZTm:snqRiPxINcrcrAczRMqQVNm35zoL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-07_94d6604984c84e3e2a552aa6383e76e5_virlock
Files
-
2024-03-07_94d6604984c84e3e2a552aa6383e76e5_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 562KB - Virtual size: 562KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE