Static task
static1
Behavioral task
behavioral1
Sample
2024-05-10_5770ef0753b7cc56d84de844af863a81_virlock.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-10_5770ef0753b7cc56d84de844af863a81_virlock.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-10_5770ef0753b7cc56d84de844af863a81_virlock
-
Size
187KB
-
MD5
5770ef0753b7cc56d84de844af863a81
-
SHA1
557b95263561449082f929b9834f7148fd43b84d
-
SHA256
5e263565cbe71ec5f9076a0c644c14b3887db824b14ed184f9902908eb4f435a
-
SHA512
0fd8d0a8fe8d189ccb57c72dc6f4f85ff3e232a8e4e9d1d9a008bb515bda97e8292c70251f16f24574e0d79f5d831605413bb8dc77317d8889c3a31ed6106804
-
SSDEEP
3072:Fo9duBEyUW05Kp7buAHD57CBnSefsidFe3z/zu6QmK95PPkIKtu:Foo9p5enSvidU/q6QRNPka
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-10_5770ef0753b7cc56d84de844af863a81_virlock
Files
-
2024-05-10_5770ef0753b7cc56d84de844af863a81_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE