Static task
static1
Behavioral task
behavioral1
Sample
2024-03-08_22d85d1d4ccbc09e4d59d6d6ae008388_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-08_22d85d1d4ccbc09e4d59d6d6ae008388_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-08_22d85d1d4ccbc09e4d59d6d6ae008388_virlock
-
Size
255KB
-
MD5
22d85d1d4ccbc09e4d59d6d6ae008388
-
SHA1
52f0ee001b9815ca61b8b3c89aa5ffe054f70c81
-
SHA256
e55048a50e87d36ccea3d10330169b8a212ce64bd290a4a4f381c5700d92b7af
-
SHA512
165a1a89316cfc4a4dc11b2eb396e7df4b71bfee5bb8d87d873dfb3b6f3e1da08c1277055fb3afcc4261f0e4e8cabaef4ac87d2f480859adaeecef67d93dd73e
-
SSDEEP
6144:XDoEuNWNPk/kjjjjjd/Ugivain7hVB/bo9d:Xt7N1jjjjjCZbxED
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-08_22d85d1d4ccbc09e4d59d6d6ae008388_virlock
Files
-
2024-03-08_22d85d1d4ccbc09e4d59d6d6ae008388_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 250KB - Virtual size: 250KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE