Static task
static1
Behavioral task
behavioral1
Sample
2024-04-20_21b5d1cde126b9cda0c941b650d47358_virlock.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-20_21b5d1cde126b9cda0c941b650d47358_virlock.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-20_21b5d1cde126b9cda0c941b650d47358_virlock
-
Size
254KB
-
MD5
21b5d1cde126b9cda0c941b650d47358
-
SHA1
de09a271d48b792bbe2d086ebb26b053e87a78b9
-
SHA256
cac604a8cdf80c0fe10747c84c4a306815ab50e2ed44aa87912abf6346558b27
-
SHA512
f6864c3fcfe4ddc50e0e587de94a7e19ade7ec3ae92805bfcf294d9b16b6c4aacdf191b12c9df4c585d1df0ddb2cb3d7c09065cc5a37787379c8aa1e27f3cfcd
-
SSDEEP
6144:iTofruSCudEJ71EzXMlJXKWCCCCCCCCCCCCCCCCCCCCzP4ET4MLVtU:+ofroTEYlJXKId4MLrU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-20_21b5d1cde126b9cda0c941b650d47358_virlock
Files
-
2024-04-20_21b5d1cde126b9cda0c941b650d47358_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 249KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE