Static task
static1
Behavioral task
behavioral1
Sample
2024-04-15_f3262d8750e3314eb92639b3a7e97cbb_virlock.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-15_f3262d8750e3314eb92639b3a7e97cbb_virlock.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-15_f3262d8750e3314eb92639b3a7e97cbb_virlock
-
Size
345KB
-
MD5
f3262d8750e3314eb92639b3a7e97cbb
-
SHA1
5683c286e264c11a2a80b46cd5ee094abfa85bfa
-
SHA256
06c1927de19584550c24b687a51c834d07961d718c6408322d9eb2429914de9b
-
SHA512
32ba27f36fe6630a527d373b9acc24b4c354b0c81d5f55e9e260a7bc0b442e6f42c83fb1a61d8be8484f4d9b66ac5ebe47b1a22f4f0d3c2d7923530b25825a9b
-
SSDEEP
3072:LY4tukbqeW8q34vq4F9BdDivP2n26FGiRj5Vjs8LZTJOIAruNhhhhhhhhhhhhhpn:LhtV9+4vq4BdGvUN/fo8FTnAb8lBL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-15_f3262d8750e3314eb92639b3a7e97cbb_virlock
Files
-
2024-04-15_f3262d8750e3314eb92639b3a7e97cbb_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 340KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE