Static task
static1
Behavioral task
behavioral1
Sample
2024-05-02_ef1276ff55a9ce12c594358cd5a7c0b9_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-02_ef1276ff55a9ce12c594358cd5a7c0b9_virlock.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-05-02_ef1276ff55a9ce12c594358cd5a7c0b9_virlock
-
Size
2.6MB
-
MD5
ef1276ff55a9ce12c594358cd5a7c0b9
-
SHA1
a6507f8d6c6cbed5b906fd19a1ec627cfb505490
-
SHA256
b5a6ad1a75b724deba8ed9152beccef2ae402259814efb71a1feeb1b7a120636
-
SHA512
c8a5db798cec637d996ad0c75b8baa95c64f6f9dbf669d9dba487e392f4dc276381fcd74ed99d7df5800e423bb02de0045f63cd0bf4c7ee8b7f1622188a53587
-
SSDEEP
24576:xhNaGcrBGU8MKJQ3w7DCJrYA3nr6CYcz1237y3zdQxpd2Mahpvt3HUvQLfK5OTfT:xWUMHw7GH+CYcBwIzvtEvQLfKQhh2A2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-02_ef1276ff55a9ce12c594358cd5a7c0b9_virlock
Files
-
2024-05-02_ef1276ff55a9ce12c594358cd5a7c0b9_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE