Static task
static1
Behavioral task
behavioral1
Sample
2024-03-14_358e999e24ce298221a05c23603622fb_virlock.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-03-14_358e999e24ce298221a05c23603622fb_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-14_358e999e24ce298221a05c23603622fb_virlock
-
Size
137KB
-
MD5
358e999e24ce298221a05c23603622fb
-
SHA1
ff3ebbd4dac4af20b67e1d262627fab47295069d
-
SHA256
8b0880a34837b6beee6c67b3508ffd7ea77dddb67b779429fe3f1cac71c3ff7c
-
SHA512
e5f92b2df98148b5dd4401f16014d990a2b3aed02e0a2cdaca151219be3e5c258affdeef86007cc7d2099e0e122da15b0fd45234293c6ea6dbda25ec5461a562
-
SSDEEP
3072:4HgrbXWDnDmXOi7helEG+nVOxHyFxsRwWAzm7QSR5mego53hnDX:4ALU6ei7helEG6VOxHyFxsRwWAzm7n7R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-14_358e999e24ce298221a05c23603622fb_virlock
Files
-
2024-03-14_358e999e24ce298221a05c23603622fb_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE