Static task
static1
Behavioral task
behavioral1
Sample
2024-04-25_1f55650a867850b488709acae194c14a_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-25_1f55650a867850b488709acae194c14a_virlock.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-25_1f55650a867850b488709acae194c14a_virlock
-
Size
253KB
-
MD5
1f55650a867850b488709acae194c14a
-
SHA1
4a96859620f28d101b7250462249de5e98d7eddd
-
SHA256
f35df56bfd11fa3f304a908f09f9ec8a0c82a9164f0237917192fd3cc38f75fb
-
SHA512
00857c533c64f82794b878af83d0647c2f39b6b70fb46df4628f7f3f8d6c23f48737f6dc63169a1e2270be01422b55129fa71bcddb968d9b5f6eece7b44de386
-
SSDEEP
3072:WSLTNmw6zLVo6koonKAjcMe/tNdd+LYJhqLdddddatOUCsnF/UzT:WSL6LVGLnJ4GoeUcT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-25_1f55650a867850b488709acae194c14a_virlock
Files
-
2024-04-25_1f55650a867850b488709acae194c14a_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE