Static task
static1
Behavioral task
behavioral1
Sample
2024-03-08_21a06d1248a10d996ff3ccdeed9fbff5_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-08_21a06d1248a10d996ff3ccdeed9fbff5_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-08_21a06d1248a10d996ff3ccdeed9fbff5_virlock
-
Size
856KB
-
MD5
21a06d1248a10d996ff3ccdeed9fbff5
-
SHA1
a7b71da509e3b76dcb9d4b1d266493f939476b9a
-
SHA256
06b0d091cfc964f5730d59b3d7dbe31e96cdf3b22392a841e93f68bf58d286a6
-
SHA512
3cb24c30bd93b2c3af2c1c177196f8e9901348f24b2f4d7a70a7833349849b807844d22da474aa28ad99791fbd16314d81ce0cf80ee6ea622f45e020b53dc582
-
SSDEEP
12288:rZ3Yccpb5honhO1rO/RygBYkuT3t5xzq2G5DqEHUuQYDD1oOzpOobWqVVq:rZ3Yccptho8U/ITkuTd/pGfD6OdFjVq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-08_21a06d1248a10d996ff3ccdeed9fbff5_virlock
Files
-
2024-03-08_21a06d1248a10d996ff3ccdeed9fbff5_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 855KB - Virtual size: 854KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE