Static task
static1
Behavioral task
behavioral1
Sample
2024-03-27_c2bfd3fb999acd9b4f99f31e6daed3a8_virlock.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
2024-03-27_c2bfd3fb999acd9b4f99f31e6daed3a8_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-27_c2bfd3fb999acd9b4f99f31e6daed3a8_virlock
-
Size
187KB
-
MD5
c2bfd3fb999acd9b4f99f31e6daed3a8
-
SHA1
85725ab44544ebb6e0513e982b8236f83350afe5
-
SHA256
2d4cc5902890101f4418c41a33bb46ada66ac5dd8ff4470a5dd1f00c8e48dde8
-
SHA512
9b7fd71ed87645b801dd5ba2e886fd7a2642e0334b220ab8006146bc1e2966a2966d8ba0f0ff9f7c06288c7fe0aed994e4df3e4679db4ff395eeceb0ee59d203
-
SSDEEP
3072:OahcMtHh3UL8pVBLyZFt2k2ujDqs3dYemiqgoIJzaaVO2SN:OccYh3ULuLyZmujD9YFiZpzaA5SN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-27_c2bfd3fb999acd9b4f99f31e6daed3a8_virlock
Files
-
2024-03-27_c2bfd3fb999acd9b4f99f31e6daed3a8_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE