Static task
static1
Behavioral task
behavioral1
Sample
2024-05-01_cc06d182a020473b210157d199239c59_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-01_cc06d182a020473b210157d199239c59_virlock.exe
Resource
win10v2004-20240419-en
General
-
Target
2024-05-01_cc06d182a020473b210157d199239c59_virlock
-
Size
255KB
-
MD5
cc06d182a020473b210157d199239c59
-
SHA1
89d010858777eeec5431e7d78e20d999dfb1f92d
-
SHA256
8893135e33a87d4f2c001dfa11c6d08243afbab314a06ecd81ab1802352070bc
-
SHA512
6bfd638b8f57906e6bf5a5301317cb1dd8854ff42ae3b57cab28306958bde36f6e80c06acf32302dfeedb3f0d9c75913bd973c25869ad2ab33447e6eedf14636
-
SSDEEP
6144:drA31FbSZP6Kl1Nr2bChy2MnCeicm/6Sx:drMF6P6I1NKChyBvmCSx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-01_cc06d182a020473b210157d199239c59_virlock
Files
-
2024-05-01_cc06d182a020473b210157d199239c59_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 250KB - Virtual size: 250KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE