Static task
static1
Behavioral task
behavioral1
Sample
2024-04-19_f153727121e27b307c4ae3901aeb7233_virlock.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
2024-04-19_f153727121e27b307c4ae3901aeb7233_virlock.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-19_f153727121e27b307c4ae3901aeb7233_virlock
-
Size
566KB
-
MD5
f153727121e27b307c4ae3901aeb7233
-
SHA1
a0687692cfe7e39e54ee8ed08b45d7b375682ac8
-
SHA256
5970697c59af1563f18be764df18a8a9e47d41b62dc78c604e75ed16614f64aa
-
SHA512
4fea38a6c3684174f3eca0d5cc69996e9910b9ec09bd25992f5320df62dbaf2c111603e1294f3fc68281808bfcc3c8b4bd3b97376b910ab3dd8f59ffd79b98fa
-
SSDEEP
12288:GMgGXMMQonS/kmahz6aHDYqg0rKea1VPWdwFLez:GL0hzZHDZrS1VPMwAz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-19_f153727121e27b307c4ae3901aeb7233_virlock
Files
-
2024-04-19_f153727121e27b307c4ae3901aeb7233_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 565KB - Virtual size: 565KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE