Static task
static1
Behavioral task
behavioral1
Sample
2024-04-24_d5304c7427b08ea3cd0f747cb313a151_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-24_d5304c7427b08ea3cd0f747cb313a151_virlock.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-24_d5304c7427b08ea3cd0f747cb313a151_virlock
-
Size
429KB
-
MD5
d5304c7427b08ea3cd0f747cb313a151
-
SHA1
1cc49140c962b0a0946f020a40443cca40ec548a
-
SHA256
1a7524e1397938fca69010cf78fef2049dcb136875921d95f736c998d7b939d2
-
SHA512
834f224544f9cd988463fb5c702599d234973c3174492673d0a29fcedd1a773841ac68da006b86c8514f3ce61a88a879b205c84cad5c7de3c4723cd9949c905d
-
SSDEEP
3072:tXWmrrQ9IAPYhubUKHSJSngEEsSiZbaq9DHjq/YUZ3j3TBBBBKJADoLcTDmaIg5b:RXQ9IAP4gnREs5bljRuy2Qc+aIgWSGc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-24_d5304c7427b08ea3cd0f747cb313a151_virlock
Files
-
2024-04-24_d5304c7427b08ea3cd0f747cb313a151_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 424KB - Virtual size: 423KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE