Static task
static1
Behavioral task
behavioral1
Sample
2024-04-30_e4df461c25ec1b030b441b4b4eb9b5de_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-30_e4df461c25ec1b030b441b4b4eb9b5de_virlock.exe
Resource
win10v2004-20240419-en
General
-
Target
2024-04-30_e4df461c25ec1b030b441b4b4eb9b5de_virlock
-
Size
267KB
-
MD5
e4df461c25ec1b030b441b4b4eb9b5de
-
SHA1
729bcc552a0048642481e8b7fd4487cc0b177646
-
SHA256
a6f79af8abc8c14186ce64b7fb882647ba4c2a287ae2387fa08a3361d9dfa259
-
SHA512
8efca18b7a45505f2c582199778c618f049e053e0c7110485ca00f01ff772337778611d1969499c92169e6b0c3029538d003e171c255012a1ca9d686dbf576d4
-
SSDEEP
6144:cd25iYXSp4kR1ttQCCdytjNI41ryogOX0kXY+/F:5XsrPQCCdytjNI41ryogOX0kI+N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-30_e4df461c25ec1b030b441b4b4eb9b5de_virlock
Files
-
2024-04-30_e4df461c25ec1b030b441b4b4eb9b5de_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 262KB - Virtual size: 262KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE