Static task
static1
Behavioral task
behavioral1
Sample
2024-04-05_fab256308760b7a3ca67dbc594a5f6e9_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-05_fab256308760b7a3ca67dbc594a5f6e9_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-05_fab256308760b7a3ca67dbc594a5f6e9_virlock
-
Size
140KB
-
MD5
fab256308760b7a3ca67dbc594a5f6e9
-
SHA1
95a3ecfe0f7288799b38beb7c1310ee8d1a395ba
-
SHA256
6aa249f7d3e95677356a7e1da6e00ed3c8226f67c6a1c49125a6161b1077b65e
-
SHA512
50190d7001d5cac7285a2abd3970d2997d58638c479341996f6b398e077e1ed3ebd5b42ad06a5ab8e5b0fb971b86080d7d828094bbd44188f9de8a66df05e63e
-
SSDEEP
3072:8yKOneU2yMnOzKakO3YOerpPn9SBk8SOaZrJre32c5b8k1M4q+6bBa1yxhv7X:8xKeU2HOzRkO3YOerFgBZSO8rJKmZWMB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-05_fab256308760b7a3ca67dbc594a5f6e9_virlock
Files
-
2024-04-05_fab256308760b7a3ca67dbc594a5f6e9_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE