Static task
static1
Behavioral task
behavioral1
Sample
2024-04-23_9c8fd050226e812f6f7ed525dcf7601c_virlock.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-23_9c8fd050226e812f6f7ed525dcf7601c_virlock.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-23_9c8fd050226e812f6f7ed525dcf7601c_virlock
-
Size
162KB
-
MD5
9c8fd050226e812f6f7ed525dcf7601c
-
SHA1
5392c6efdd896d08bbc7e203529bce1a4a4419ed
-
SHA256
dc5590ba1c9df67e5adf6cce15567d1968fd98c98b171647dc28596ae393a7d8
-
SHA512
50b851eb6f72607e1966cec6a8e924110f7e4c23d69e6c77e244a4997a0f2e26e6fc00e4387622061cef55077ff0047db9b07026781a551a8e01ac2403159694
-
SSDEEP
3072:jo3OByBAdx2n/sf4dG6UVzHMZ2CIO+BIGCx0+ZLsa+y:jo3LCdx2/rzUGZxF4IGW0+ZLsa+y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-23_9c8fd050226e812f6f7ed525dcf7601c_virlock
Files
-
2024-04-23_9c8fd050226e812f6f7ed525dcf7601c_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE