Static task
static1
Behavioral task
behavioral1
Sample
2024-05-08_a943a788802bc713c8b6beb35c36d47f_virlock.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-08_a943a788802bc713c8b6beb35c36d47f_virlock.exe
Resource
win10v2004-20240419-en
General
-
Target
2024-05-08_a943a788802bc713c8b6beb35c36d47f_virlock
-
Size
140KB
-
MD5
a943a788802bc713c8b6beb35c36d47f
-
SHA1
1809e77723a4ffc4beb69b975354b16c863ffd67
-
SHA256
1152deba50d0225f20bcad67e2ab5d1f7135cc0cbdb9a18bf9c5b34884e1cf3f
-
SHA512
76b67e93ab7cb78f76880474babfbb705e5e6529b74873ded7c5cbdfe9ebb0eb16585db03b4c14921738a57e48ce2bfeac2357e8409ec8e7bfb10102873915a3
-
SSDEEP
3072:d9eJlL4z28Gtt5Xd5uFchMrzG6NH0KskTLv0xZbaX:Y4z2rbUrzNHL96bw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-08_a943a788802bc713c8b6beb35c36d47f_virlock
Files
-
2024-05-08_a943a788802bc713c8b6beb35c36d47f_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE