Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_bcc8193b54dcf924c4bbec71f1768195_virlock.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-03-12_bcc8193b54dcf924c4bbec71f1768195_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-12_bcc8193b54dcf924c4bbec71f1768195_virlock
-
Size
117KB
-
MD5
bcc8193b54dcf924c4bbec71f1768195
-
SHA1
5cfbf974963a0cac9692e166ee684cb9de6ed697
-
SHA256
b2acff6086ca188891f95a7aa4cdb5f2b6eac32c6460ebbdb48dbb1f46d46363
-
SHA512
38f49163b55e7fcc0b235d03c426467d99dcf77d700dbedf9c45163ccee5d6bfb337a9d7c18136c85d4e77cab197d50be74f7ac438ceadfdc3b09e50a6b35f76
-
SSDEEP
3072:IBx+lZA3rctf8762QP3i6AZcKmrKtQAgggO:IBQA7ctf8O2QP3i6AzmrKtQA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-12_bcc8193b54dcf924c4bbec71f1768195_virlock
Files
-
2024-03-12_bcc8193b54dcf924c4bbec71f1768195_virlock.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE