Static task
static1
Behavioral task
behavioral1
Sample
2024-04-18_243461e03c9dc805f7dd1a48a36d8f0c_virlock.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
2024-04-18_243461e03c9dc805f7dd1a48a36d8f0c_virlock.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-18_243461e03c9dc805f7dd1a48a36d8f0c_virlock
-
Size
344KB
-
MD5
243461e03c9dc805f7dd1a48a36d8f0c
-
SHA1
95a9c589ca04023fbcbd3de1e5ef7e74589f50dc
-
SHA256
e1d75054bf85340a7d81d5865c9aa58b24998eae60bbb969a5ac9d685fac7251
-
SHA512
466cc2ce9195efbe4d472c31493dacc90cf31eae7a61c2cc1dab6b60a97abaa867d74ac2b347e25a64b8c2e9c74363e513d91d2de4090e699fa2c2da8e707242
-
SSDEEP
3072:lDFGbvMmqgh0uqY4k1sDVEke9eTJEjiPHUkpuTpneC0llqZWHwL3KCwTvqSXLfwq:tUbUmWfk1sWCHU3TpneC0llqX3KDnj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-18_243461e03c9dc805f7dd1a48a36d8f0c_virlock
Files
-
2024-04-18_243461e03c9dc805f7dd1a48a36d8f0c_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 339KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE