Static task
static1
Behavioral task
behavioral1
Sample
2024-04-05_4b9d5256b1448b211e11b6d5de1da53b_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-05_4b9d5256b1448b211e11b6d5de1da53b_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-05_4b9d5256b1448b211e11b6d5de1da53b_virlock
-
Size
359KB
-
MD5
4b9d5256b1448b211e11b6d5de1da53b
-
SHA1
f91379dda2e16330f38094cce041f9f484315364
-
SHA256
1b378a136ae92774250da60f41c987449aca67dcbe895fe78ecc45dec8d98903
-
SHA512
9f52cb8682c5fe75ca1da7446a374c94fbbf819467a7d7682f58f7bed904c87371eb38648f599db7a6e874c3030cf49840af809580360b50bd14356a97068c48
-
SSDEEP
3072:IE7RlOboweeDtiq7noiXXbuUXYcu1dhoCj5A8mmnMCMOd71UFSPP2Zcv20kMuaMx:l1MXfu+YrDh9dmwMaJY7ZmkMSdwi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-05_4b9d5256b1448b211e11b6d5de1da53b_virlock
Files
-
2024-04-05_4b9d5256b1448b211e11b6d5de1da53b_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 354KB - Virtual size: 354KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE