Static task
static1
Behavioral task
behavioral1
Sample
2024-03-10_36f5bf267625dee364c5379e5976140a_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-10_36f5bf267625dee364c5379e5976140a_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-10_36f5bf267625dee364c5379e5976140a_virlock
-
Size
564KB
-
MD5
36f5bf267625dee364c5379e5976140a
-
SHA1
de52f5e8b2da605a633db23a9916389e5c1c897f
-
SHA256
eac7299613c2c53e73e71c3b103ce77d5483d5b607b4f317eec48291237e8717
-
SHA512
e7806add19dc907eaaffe505b78f4ed89fab49456966c658743e0ef2aba0d0b295cb219d9c046006435545f0734ace0006d5f08f8a8db4c6bd2bfcf20cedf7e5
-
SSDEEP
12288:Dcza7T4PhnkpbPoJaPw8SOFevzzBoAHn++Eq:lT4PhkRPoJaDFevPBoEn++
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-10_36f5bf267625dee364c5379e5976140a_virlock
Files
-
2024-03-10_36f5bf267625dee364c5379e5976140a_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 563KB - Virtual size: 563KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE