Static task
static1
Behavioral task
behavioral1
Sample
2024-04-29_441beb30980c495d71b66b437640f991_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-29_441beb30980c495d71b66b437640f991_virlock.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-04-29_441beb30980c495d71b66b437640f991_virlock
-
Size
566KB
-
MD5
441beb30980c495d71b66b437640f991
-
SHA1
06fab794c9a851eeb6fe502a4c1f71899c9e7473
-
SHA256
03d4f8a6aac27a1757f4081bdbf6ee15d11ccb3c8dc3eaa9e7e0274ae3feb7a5
-
SHA512
5a61ca3ca315951497ac11872fc2822c78d51bdbdb75adc8b9cbc99ffe17f3d2ae34626357fb901225b739342d1cf3c74cd6c456a3863d77a1447363ab2da521
-
SSDEEP
12288:UfbVGYAYfbweeuVAfj0/ufjnr1U59Yt7RdALh2PsK8TBLVVrwQqPLCnEPr8xo5c/:UzVGYvieA5LMc7RqVVrwQqPLCnEPr8xo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-29_441beb30980c495d71b66b437640f991_virlock
Files
-
2024-04-29_441beb30980c495d71b66b437640f991_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 565KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE