Static task
static1
Behavioral task
behavioral1
Sample
2024-03-11_b56390b087849513f5b86a55b1fc6ae8_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-11_b56390b087849513f5b86a55b1fc6ae8_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-11_b56390b087849513f5b86a55b1fc6ae8_virlock
-
Size
137KB
-
MD5
b56390b087849513f5b86a55b1fc6ae8
-
SHA1
649d0f4b15c8715b646b5714d76ae715032dc593
-
SHA256
0ac133792eda1736adece44efca49a0a89b0506b83fa697b93bfce616e793d71
-
SHA512
3c1aee240aa7615ea8680bc2ab4e3c4fe5c8a46f43eb8b93a43061b8b00364aa2185f411d16862c7b18333b10833662d129d1ffc6a6cc5d3cc873c0ee99d3d1b
-
SSDEEP
1536:GHfllOWuH4+TcQJkLo5PxyzuH4ti30+gPSBfu17BQ8IL8bffYPmzpQ2GX:gtQH9cQJkLoPSCjCBQu3dz2X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-11_b56390b087849513f5b86a55b1fc6ae8_virlock
Files
-
2024-03-11_b56390b087849513f5b86a55b1fc6ae8_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE