Static task
static1
Behavioral task
behavioral1
Sample
2024-05-15_21638ddc1196420a4f727d5192e6fbf1_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-15_21638ddc1196420a4f727d5192e6fbf1_virlock.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-15_21638ddc1196420a4f727d5192e6fbf1_virlock
-
Size
269KB
-
MD5
21638ddc1196420a4f727d5192e6fbf1
-
SHA1
3879b76614b69b574d9efa7b9648327872ba5902
-
SHA256
166b5a70d7e4f30cf32735e26ecc2b37bfce37336fb57a0ac44e6bd5f62b4c59
-
SHA512
414894d7c6ceb5bc6ee84dbe69a72732d63f752aede653d87034284e24f36122e8e59b53abc4d2191408f8092b88efc841eca5d3bc35cea9a264c14acec4d084
-
SSDEEP
6144:XtFYwnF9qiyNwzZWnJgBwFAmpbIHfgQrml5W6zb3xFakZQI:9Z3WNwRw3pbmgQOXQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-15_21638ddc1196420a4f727d5192e6fbf1_virlock
Files
-
2024-05-15_21638ddc1196420a4f727d5192e6fbf1_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE