Static task
static1
Behavioral task
behavioral1
Sample
2024-03-10_efeb768778d88ee64189074a782c7847_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-10_efeb768778d88ee64189074a782c7847_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-10_efeb768778d88ee64189074a782c7847_virlock
-
Size
654KB
-
MD5
efeb768778d88ee64189074a782c7847
-
SHA1
f100aad46dab64cb657bc656fa3865f713dbe071
-
SHA256
04f564780f67fad1e1602d028b7bb61bbc5994d4f456d26fd9753b222fdfed73
-
SHA512
af61ef57eff5ef4094093fddb79a898c695114dcfd4d1827d75f1ba99b135d42369b42b2125a3244461f873cf6c6eaa01647973be08533c12abd47bc1c325a4a
-
SSDEEP
12288:ajA0RpkJ86KFN9BGTq482o7jhF769JBY2hgj//lXwAyWuSqYwCyG29O3uYiDB:a00RSfq48bjHG9JBYigj/9JbwCyG29OQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-10_efeb768778d88ee64189074a782c7847_virlock
Files
-
2024-03-10_efeb768778d88ee64189074a782c7847_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 649KB - Virtual size: 649KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE