Static task
static1
Behavioral task
behavioral1
Sample
2024-04-25_221cbf823fc3aae0a52d012dbefbbdb1_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-25_221cbf823fc3aae0a52d012dbefbbdb1_virlock.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-25_221cbf823fc3aae0a52d012dbefbbdb1_virlock
-
Size
569KB
-
MD5
221cbf823fc3aae0a52d012dbefbbdb1
-
SHA1
89996159993a2c0fa6492dc7f05a695905dd0e8d
-
SHA256
cbe5d46273e439f18496ce85fb04448eedc89b5fed4aedd82573466088ea0c68
-
SHA512
2612ccf798fe5e98f1d747efd7e5bd59682a2220c23d72b1190fe705abeed54fd5aa300d078cd6c286ad968ef509c34b4d6e7924deb17ef9d20747798e14725d
-
SSDEEP
12288:xp6B9l0agWMwiceBqp83HfboSmWS/dQxIaMK9Dr7:f+CwFm3fboSKd8VMuj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-25_221cbf823fc3aae0a52d012dbefbbdb1_virlock
Files
-
2024-04-25_221cbf823fc3aae0a52d012dbefbbdb1_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 564KB - Virtual size: 563KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE