Static task
static1
Behavioral task
behavioral1
Sample
2024-03-09_2f1335be26049c9f9d2571249e3b1ff4_virlock.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-03-09_2f1335be26049c9f9d2571249e3b1ff4_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-09_2f1335be26049c9f9d2571249e3b1ff4_virlock
-
Size
450KB
-
MD5
2f1335be26049c9f9d2571249e3b1ff4
-
SHA1
3559d56e867f19223db6d093797993d94d3888ea
-
SHA256
9f21343bf6511d2e3c4384648786d6d91c16a77f4adbe91bf79a04e1a04c39d1
-
SHA512
7cd1a119ae3b3773e23bd1bd46a42bb264a54d5cb7aa92a0894ad661c6b96c1e87a16d27c0557f415b139d1554c287823cedce46436914837abdfae31eeae1e7
-
SSDEEP
6144:pmZX1FyGXiVe3drVaMShG677mXrjYPn0YYB3ZTntlh3A7+7yIDwknkQiL:wbFyGXi2dJa1ob8PnKBpvhQAhpk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-09_2f1335be26049c9f9d2571249e3b1ff4_virlock
Files
-
2024-03-09_2f1335be26049c9f9d2571249e3b1ff4_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 449KB - Virtual size: 449KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE