Static task
static1
Behavioral task
behavioral1
Sample
2024-05-16_1f0f61276698be12490b213cb976ee34_virlock.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-16_1f0f61276698be12490b213cb976ee34_virlock.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-16_1f0f61276698be12490b213cb976ee34_virlock
-
Size
774KB
-
MD5
1f0f61276698be12490b213cb976ee34
-
SHA1
585753915a143ef7ba005e4cd2c13f32a28e1ab7
-
SHA256
2dcd5f9ac28dc66efbed495943b09d7b5490e600180c386b0d372e85650c7a50
-
SHA512
0dd3881500c5e1f2da58ba3c607e8d91cdeb52e3176d181ff4ae9572d689588075566ffb7e28d951f4ce9639085f50a32bb2f33e4a8185318fbd3b9a0034bd97
-
SSDEEP
3072:NjWLeqawin1EdN90fiDhJqpZHjjBWeswYqAhh7ymvkJr:Nqywin1Ej90fK3kDyvCR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-16_1f0f61276698be12490b213cb976ee34_virlock
Files
-
2024-05-16_1f0f61276698be12490b213cb976ee34_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 769KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE