Static task
static1
Behavioral task
behavioral1
Sample
2024-04-22_49ac620226f6022d6478ac20bfc02025_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-22_49ac620226f6022d6478ac20bfc02025_virlock.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-22_49ac620226f6022d6478ac20bfc02025_virlock
-
Size
254KB
-
MD5
49ac620226f6022d6478ac20bfc02025
-
SHA1
92fc78c64dad5f13976526616117adad1c87df7f
-
SHA256
6bab534ed616e73d4e4551a32f4b315a384cbe1238f6ecef6a9fedb4ecf163b7
-
SHA512
1bf7ffdce70ea40095dba9a6000e9bf070e06963d2090f9aba55b638d73e0e4fbfea1a85d85b662228a62096515aad92a9a096efee00da120672ffcfc3661fd2
-
SSDEEP
3072:vEBIByy9r4fyVvOpf/zzEbI6jP3hegGDd89sFVW25Bz2ABdh9yl3CD:v6I73vOpfrAkkdGC+j/z2eB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-22_49ac620226f6022d6478ac20bfc02025_virlock
Files
-
2024-04-22_49ac620226f6022d6478ac20bfc02025_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 249KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE