Static task
static1
Behavioral task
behavioral1
Sample
2024-03-08_3fef4e434a2b45541e882a41ea7e4a47_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-08_3fef4e434a2b45541e882a41ea7e4a47_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-08_3fef4e434a2b45541e882a41ea7e4a47_virlock
-
Size
119KB
-
MD5
3fef4e434a2b45541e882a41ea7e4a47
-
SHA1
79725b3df9f1858b117aff859ef8ac5c36d73968
-
SHA256
da00aaff8dca2b61281a2333efdb112b32ebb2262cdd3aaf161e8c845e523569
-
SHA512
93a9c5fc7217c25354ebcfa5c02e2e004055ea66c76ad1378426c54e08b66af3a721f4a7c525dcd3d99ea0da4f3d2557027a45ef3221b60aa322d3516ba46c65
-
SSDEEP
3072:wX5np3fMjagSRv2KJPwUDS7+ZlsogJ/WHUHv:W3UjbSjJqJ/kY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-08_3fef4e434a2b45541e882a41ea7e4a47_virlock
Files
-
2024-03-08_3fef4e434a2b45541e882a41ea7e4a47_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE