Static task
static1
Behavioral task
behavioral1
Sample
2024-04-30_7e0e172686ccc59b8c8d431482961c6f_virlock.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-30_7e0e172686ccc59b8c8d431482961c6f_virlock.exe
Resource
win10v2004-20240419-en
General
-
Target
2024-04-30_7e0e172686ccc59b8c8d431482961c6f_virlock
-
Size
110KB
-
MD5
7e0e172686ccc59b8c8d431482961c6f
-
SHA1
dd92f4d4f72b4078c00cd01cc8f3d9cae409162c
-
SHA256
d198254aa42726d2fb4940ba032c7b815e1546595aa8297dfcd6472fe4e1a51c
-
SHA512
f8989813115bfbad8ddde9cbc78546e7d87e3d62796e9578fca480dfa461ac7866cd010bcdd6360131a4bd89dc2bcddb7b5239a0289356f0709acde48fc9ef3b
-
SSDEEP
1536:Rkxsl1NTHKsDOyRj+mqQG/PYr6YCN4xHCqeOjEFv3Ncowm/DUohL6LwvcbgYeP6S:uMcyzqBs6YoYTeP6nCPDV6C6bk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-30_7e0e172686ccc59b8c8d431482961c6f_virlock
Files
-
2024-04-30_7e0e172686ccc59b8c8d431482961c6f_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE