Static task
static1
Behavioral task
behavioral1
Sample
2024-04-30_d65c07e3168bc2c363ef5e60142bb982_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-30_d65c07e3168bc2c363ef5e60142bb982_virlock.exe
Resource
win10v2004-20240419-en
General
-
Target
2024-04-30_d65c07e3168bc2c363ef5e60142bb982_virlock
-
Size
586KB
-
MD5
d65c07e3168bc2c363ef5e60142bb982
-
SHA1
412ddbe2df363e5b72fd1a45e6d972f33aa77f30
-
SHA256
b212e0e33e9a208d3db0421ce38defd3d5c7cc7a6821329d11348efbe3187959
-
SHA512
006836d9fa7b024fa3e8f9f289402465d8e81f2aca0098c5dc18bc635148d2cd75101e3891e658d06f12922b6aa19488131d2199181e84bfb566145e33a042f1
-
SSDEEP
12288:Ccx1sFbQhGWGW22KV5r1YNSj+P/5iz2iT2vX24s4xmsAz9lkPvnYaU7336TN1:z3mbIGq22Kzq0j4/5iz2iT2vX2X7336B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-30_d65c07e3168bc2c363ef5e60142bb982_virlock
Files
-
2024-04-30_d65c07e3168bc2c363ef5e60142bb982_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 585KB - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE