Static task
static1
Behavioral task
behavioral1
Sample
2024-05-07_11da37e21f6890138022cd57d82a7285_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-07_11da37e21f6890138022cd57d82a7285_virlock.exe
Resource
win10v2004-20240419-en
General
-
Target
2024-05-07_11da37e21f6890138022cd57d82a7285_virlock
-
Size
158KB
-
MD5
11da37e21f6890138022cd57d82a7285
-
SHA1
3542c8f8f02dd08b10603ea702733606a7ee5863
-
SHA256
dee3b3691dc40d68d4308f94e8fdf5cfade02a4c8a9e946a42a911ddef92f7f0
-
SHA512
87b3cfd5e9a93b496e685df376eee87d98c7f94b78301c00233a4fac97b3a91ace73084a4c641367e31999debf74a540b9e46af7f2cdc25fa815811538a49b6c
-
SSDEEP
3072:zzg0jqmLErpwZQqNG4u1tuMQBRROit7ZP6MhxSKUDpQlQ3AgD/OZDKbqfTKed:9z2pwZQqVu1tuMQBPtlzhYK+pQlQh3Wx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-07_11da37e21f6890138022cd57d82a7285_virlock
Files
-
2024-05-07_11da37e21f6890138022cd57d82a7285_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE