Static task
static1
Behavioral task
behavioral1
Sample
2024-05-04_0704c409fe0d0c82556d58b2d6dfda9f_virlock.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-04_0704c409fe0d0c82556d58b2d6dfda9f_virlock.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-05-04_0704c409fe0d0c82556d58b2d6dfda9f_virlock
-
Size
583KB
-
MD5
0704c409fe0d0c82556d58b2d6dfda9f
-
SHA1
4a4e724308e93c1087a0dfa2269ede0a4233fc34
-
SHA256
c096195438396d6a78e3e61a3f6e4e43e5dca8d1ee53c7be910d8c2daf209a11
-
SHA512
4faa89762e436eca0b5c431223f6bf756b3c3ea98e0fe2526ed931d13d958087bb59722e4a13d441beb165e9612739124a112992d9ec508406bc34ee1a11bcee
-
SSDEEP
6144:to6yWH/EDgnXYZ69foClsctQzCgLwRLI0CzBRvN1At837lnTOPsputeruCkYT+sE:toGnf/lsPzCjLQ9At39TC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-04_0704c409fe0d0c82556d58b2d6dfda9f_virlock
Files
-
2024-05-04_0704c409fe0d0c82556d58b2d6dfda9f_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 582KB - Virtual size: 582KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE