Static task
static1
Behavioral task
behavioral1
Sample
2024-04-17_174ff4c0c572b5cda0568989dbdef187_virlock.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
2024-04-17_174ff4c0c572b5cda0568989dbdef187_virlock.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-17_174ff4c0c572b5cda0568989dbdef187_virlock
-
Size
345KB
-
MD5
174ff4c0c572b5cda0568989dbdef187
-
SHA1
861e1e212f1d06cd382185515f25e4f79e9904ab
-
SHA256
1a9d12a048af388ffe8591da948c557fb4e9823f80c075036c43de86297a6a47
-
SHA512
377675543b169e999fc10b97fbd3d62bdfdab5c9eb65d060f9cf87e44a8bfbd8653ad8e9b0c47f678c1e3a1506acdee6cee7ba6a414e26dbd94232fd5c6ae349
-
SSDEEP
6144:WJdwFyVIyABNorr3+mFnj+MN1TmugvaFPVWeoA6F758bcd:C2F5yABNorr3+mFnj+MN1TmugvZd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-17_174ff4c0c572b5cda0568989dbdef187_virlock
Files
-
2024-04-17_174ff4c0c572b5cda0568989dbdef187_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE