Static task
static1
Behavioral task
behavioral1
Sample
2024-04-29_799c111f395fb5f4bfd6bb5b5c0dd504_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-29_799c111f395fb5f4bfd6bb5b5c0dd504_virlock.exe
Resource
win10v2004-20240419-en
General
-
Target
2024-04-29_799c111f395fb5f4bfd6bb5b5c0dd504_virlock
-
Size
162KB
-
MD5
799c111f395fb5f4bfd6bb5b5c0dd504
-
SHA1
40fab86d4312d229b9f7038b10cfa748c6245889
-
SHA256
c28be66cabac0979013bbc7cf4a5c4a16d99dff7ac8f1b0aa324c410381dc803
-
SHA512
455ab4dfb0f0f04b3e2d107221065630f76c171847c289167cf7630890e27d7796a034012f43625f52fa09f13a7c314c66279457ce027669aee975b89acda18b
-
SSDEEP
3072:w7m16SisGTOqbKXV+ctAo3loGns7MzoqlqXeRD4+BZBtvqcL8n3MT4+MzJfMFUMB:h6SDGTOqbKXV+ctAo3loGns7MzoGqXeV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-29_799c111f395fb5f4bfd6bb5b5c0dd504_virlock
Files
-
2024-04-29_799c111f395fb5f4bfd6bb5b5c0dd504_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE