Static task
static1
Behavioral task
behavioral1
Sample
2024-03-14_5bb7e1be43c59eb9de91f77b11322921_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-14_5bb7e1be43c59eb9de91f77b11322921_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-14_5bb7e1be43c59eb9de91f77b11322921_virlock
-
Size
253KB
-
MD5
5bb7e1be43c59eb9de91f77b11322921
-
SHA1
8c63c0f42ae69211e0d91b36c58bb25e85c78487
-
SHA256
e3ce52d53887b715e9c9ee3ee5f2870c36bde69714c7e869055f6d951b3a5bef
-
SHA512
5f785111e3e1dcddb6febe3e78040d8276af85a4c2370930b740e0b76c817e2006f3b1f7b0b8f6949ae89432be324d01bd6de3aa161e2c6debcd6af425c0021b
-
SSDEEP
3072:bAysCSNoDF7BRDmS5Mg3FsMIn2GpTGFyGGCM/tU7BT7t3Vv:lsClHDm/g1RKJT7GEad7tR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-14_5bb7e1be43c59eb9de91f77b11322921_virlock
Files
-
2024-03-14_5bb7e1be43c59eb9de91f77b11322921_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE