Static task
static1
Behavioral task
behavioral1
Sample
2024-05-02_099d83cb17a87d5a5bc1793b76a6cdf7_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-02_099d83cb17a87d5a5bc1793b76a6cdf7_virlock.exe
Resource
win10v2004-20240419-en
General
-
Target
2024-05-02_099d83cb17a87d5a5bc1793b76a6cdf7_virlock
-
Size
640KB
-
MD5
099d83cb17a87d5a5bc1793b76a6cdf7
-
SHA1
da354b28f643eb41b664e24b10b93e4f70d1eeba
-
SHA256
1efd567637b18fddd7fe51b5062dd37cb5f96efac8e25d11f1771125111fdd65
-
SHA512
022502ce9e4fe52337d9aa12a89db1f00e4ea5a0eaf0f34b363b7c566c54b799dce5303065c24c4013537bb1bda4cfdd9e760ccba4c3026f4eea50b9e8a96ec5
-
SSDEEP
12288:XstQxi32gxvJ4QWrGyliC2BKw3SGO36kghtQ4iA5Tu3xwoG3O:cWQ32gBJ/4qwxwoG+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-02_099d83cb17a87d5a5bc1793b76a6cdf7_virlock
Files
-
2024-05-02_099d83cb17a87d5a5bc1793b76a6cdf7_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 635KB - Virtual size: 634KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE