Static task
static1
Behavioral task
behavioral1
Sample
2024-04-21_d718b53c79e6ff9a82d245140c37494d_virlock.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-21_d718b53c79e6ff9a82d245140c37494d_virlock.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-21_d718b53c79e6ff9a82d245140c37494d_virlock
-
Size
344KB
-
MD5
d718b53c79e6ff9a82d245140c37494d
-
SHA1
f3a2bc3d2c547560c4d1698bbecfda4a68ad5b3b
-
SHA256
2eed11b282c49152e0b004a9d0a23e081525700108bbcd7390d448d5ab0504e6
-
SHA512
665e0d1ff81ffa2a7f9190b3553a01c1819981f1e2c6a7ff4565d527531a3e88e7cdea45ac7e22bc65db32180e2548cfe214827cbf2ad66999e9592d575010cd
-
SSDEEP
3072:XPd/rzmVAmJRuAOYedEwrDR08BWIhf4CoO5w5pxiR/gWTq4OUVu3qV+04XZMveo+:X1+dMx08wofIOwgk4O4uF04v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-21_d718b53c79e6ff9a82d245140c37494d_virlock
Files
-
2024-04-21_d718b53c79e6ff9a82d245140c37494d_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 339KB - Virtual size: 338KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE