Static task
static1
Behavioral task
behavioral1
Sample
2024-04-27_2e05fa629a40a8d7bf7f7136492395d0_virlock.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-04-27_2e05fa629a40a8d7bf7f7136492395d0_virlock.exe
Resource
win10v2004-20240419-en
General
-
Target
2024-04-27_2e05fa629a40a8d7bf7f7136492395d0_virlock
-
Size
117KB
-
MD5
2e05fa629a40a8d7bf7f7136492395d0
-
SHA1
9bac2c613fee6924698483fbc9ca96f7248d5df9
-
SHA256
f59451290233d8c845906474d07d8733e9cf6c6e8342e8e1d794c24d319f95bd
-
SHA512
f091634ae8e7070a3513d7d302a97c13b7782db098300031437771e7ecbc4743580a94cfb20117326e9a51efa09afce12f0dd93460f5e37292068f01d813fce1
-
SSDEEP
3072:Gm8GSu2jtyaI7MP7fE8G6VGYUQee9M8iI:Gm8GSrjtVIIP7fE8bVoe9M/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-27_2e05fa629a40a8d7bf7f7136492395d0_virlock
Files
-
2024-04-27_2e05fa629a40a8d7bf7f7136492395d0_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE