Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_da27abf76c2fcd5a2d87c2537215dad9_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-12_da27abf76c2fcd5a2d87c2537215dad9_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-12_da27abf76c2fcd5a2d87c2537215dad9_virlock
-
Size
567KB
-
MD5
da27abf76c2fcd5a2d87c2537215dad9
-
SHA1
f7c1ba5cd71cd040e12c981f755383ab369cbb5d
-
SHA256
09940e43687f3cc761d49271e7949f67a55d42e0038a355d784d4cf1d558552a
-
SHA512
b5958274ad165cba489a91a2670046fb48666e4b551dcac577b2ed9ea0a89087a4b1b0c0161c4c44e5f923eaa4b689bc5b7567a111e96a716788ee58bac7d4da
-
SSDEEP
12288:fw263Y8v0wYCvCuC1Ex7H9AVZN1lURj58qCx2+AR2SkjTd3PJnQ1+IQkQg:z63Y8v0wYCvCur7H2VZe8qCx2DR4jTpM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-12_da27abf76c2fcd5a2d87c2537215dad9_virlock
Files
-
2024-03-12_da27abf76c2fcd5a2d87c2537215dad9_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 562KB - Virtual size: 562KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE