Static task
static1
Behavioral task
behavioral1
Sample
2024-04-16_ff799ed68c8cdf09f77488189226e171_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-16_ff799ed68c8cdf09f77488189226e171_virlock.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-16_ff799ed68c8cdf09f77488189226e171_virlock
-
Size
345KB
-
MD5
ff799ed68c8cdf09f77488189226e171
-
SHA1
1693fe72fb6a7d4440fac008253760a655c70b51
-
SHA256
6a27ec69e4d8dc4cdeece176f539d55b121543e6900482f1fd7d4eb0619f8ea6
-
SHA512
43626d1ea2816983b0a8a897059bec5d4bb84879c23bbecbae405f95ae7965e899dee7a968a532fc43c7da56344329447ddb0166784c8f833ee2b56d81775779
-
SSDEEP
3072:UNeLinvi5htgwCvJjAIuUd5HmVuNI2wmGaMkRZp44F:UN2inq5/gwcVGVnFtQ74I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-16_ff799ed68c8cdf09f77488189226e171_virlock
Files
-
2024-04-16_ff799ed68c8cdf09f77488189226e171_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE