Static task
static1
Behavioral task
behavioral1
Sample
2024-03-15_a399d0df329a3eb8f21f810e61ec050a_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-15_a399d0df329a3eb8f21f810e61ec050a_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-15_a399d0df329a3eb8f21f810e61ec050a_virlock
-
Size
136KB
-
MD5
a399d0df329a3eb8f21f810e61ec050a
-
SHA1
4b78e5eebaf12ac140abd275504a3e9fad8cb3bc
-
SHA256
50229a891a26a4177a8aeb020c4ad21767112c9e6f89b5658690ed543b169c41
-
SHA512
7d4420514f8f1004cdaeaf9a9f750e60cceb8fd83891011f06f19bca5383e3882439df5cde4926608fe8022e6f05ff9769028a19467e660adee1d9266a241488
-
SSDEEP
3072:7baMCdNLANLjojQ6KzbdfnHEf0+MwT0gU7XsG9GTtTW4o4+3msrFbdZX:72MWL2EYzbdfnHEM+MwT0gU7XsG9GTF4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-15_a399d0df329a3eb8f21f810e61ec050a_virlock
Files
-
2024-03-15_a399d0df329a3eb8f21f810e61ec050a_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE