Static task
static1
Behavioral task
behavioral1
Sample
2024-04-15_d7387ba971314550b94904c8187d6e3f_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-15_d7387ba971314550b94904c8187d6e3f_virlock.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-15_d7387ba971314550b94904c8187d6e3f_virlock
-
Size
565KB
-
MD5
d7387ba971314550b94904c8187d6e3f
-
SHA1
06c2dfbbf8696ef92d6c9f6f82847e7e69e285da
-
SHA256
6e53b7b58497d9664ab2e874ed468e7a391f19e3a165b85555b1a2e92ffc1559
-
SHA512
f81a7ed8e25c8121eb5904f836df51a7c8819ba7a23f194d8faa07da761e2e1a26e304315b91587f675df3f691a66a41725f7d2e3254e6dfac39b4a0ec5970e4
-
SSDEEP
12288:ysAKYaAi/NxgtdXsUzdtXy2T8dfMatc9pK0tTgtCOIW8:yXDCxgTcURtXy2TYC9pPt8K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-15_d7387ba971314550b94904c8187d6e3f_virlock
Files
-
2024-04-15_d7387ba971314550b94904c8187d6e3f_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 564KB - Virtual size: 563KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE