Static task
static1
Behavioral task
behavioral1
Sample
2024-03-15_68990b9e6c247de069deca1fbc0a776c_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-15_68990b9e6c247de069deca1fbc0a776c_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-15_68990b9e6c247de069deca1fbc0a776c_virlock
-
Size
255KB
-
MD5
68990b9e6c247de069deca1fbc0a776c
-
SHA1
b04f8a4b300debb6700cb2594ce3ad5082edb6e2
-
SHA256
896c7884f5fac925d235665ad8fa8ffb5deecf3904d396aff3276bac2f7544f5
-
SHA512
62309af76de67035e5aed49a74908fbe797e9848c45ba6efeb7fef627fb7e99c5c1eda80e086e87ccdf316084c6c7e3e6fb862c7b153940302dbed2b682088b9
-
SSDEEP
3072:XDwNdFVYnZNrzQF2GWG6n8S7MW8xAuLNamd5j3PNa1NRxlDv7V:qdeZBQgGQn8S7M7b3dVMlR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-15_68990b9e6c247de069deca1fbc0a776c_virlock
Files
-
2024-03-15_68990b9e6c247de069deca1fbc0a776c_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 250KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE