Static task
static1
Behavioral task
behavioral1
Sample
2024-03-10_6a693e2c6affd22e375caa8e9661bfb4_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-10_6a693e2c6affd22e375caa8e9661bfb4_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-10_6a693e2c6affd22e375caa8e9661bfb4_virlock
-
Size
137KB
-
MD5
6a693e2c6affd22e375caa8e9661bfb4
-
SHA1
4735a16a71aa3516cc23be44552a6af521548e34
-
SHA256
1d16dafd5afb92bd1d4ada2a2112f8e4d8ce5adc4905c00095ff76528975cd59
-
SHA512
25caad49bb5dd3ea69e84d8cec3b0e5e06fde25fc916867d77fe3c94cde00c729d8e0563e634dedd23cfd90d4e326ff8c10a438e500201f9cbad601b235d9174
-
SSDEEP
3072:u3BWH8g8o/g/DSrJ2k9GkhSK4aSr1wCfbQhtLqgzeR2BSfnfGfWfSsOIX:uRDg8o/g/m239Nf+CfMhtL/2fHZOS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-10_6a693e2c6affd22e375caa8e9661bfb4_virlock
Files
-
2024-03-10_6a693e2c6affd22e375caa8e9661bfb4_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE