Static task
static1
Behavioral task
behavioral1
Sample
2024-04-04_1b1de2ea6873301a9fdc1618c150e590_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-04_1b1de2ea6873301a9fdc1618c150e590_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-04_1b1de2ea6873301a9fdc1618c150e590_virlock
-
Size
200KB
-
MD5
1b1de2ea6873301a9fdc1618c150e590
-
SHA1
80931f6b5976c67053bb9b090c36c9643eb446b3
-
SHA256
ec238272b879e35bb9142be1559ddb6d98bbdd39a1aa6d426ea85b1039196848
-
SHA512
f4cbfa825bee9c24a696aff76b6161fd6c926ac82e3e6ccff1d150733a110f7a454e288fbfc96f7ab1594d7dfa584cbfcc95dc015d44f9674eaeb9cd692bb8c3
-
SSDEEP
3072:4UH0/gruzix0KKHj7O4txE9RHXorinuYZ8aLkSuz7hepIUsT4/euJtvEKtd6/RWL:/H8Ax/K/O4txES4/euJdEKtk/4p3Ghh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-04_1b1de2ea6873301a9fdc1618c150e590_virlock
Files
-
2024-04-04_1b1de2ea6873301a9fdc1618c150e590_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 199KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE