Static task
static1
Behavioral task
behavioral1
Sample
2024-05-17_0d87288de14ca0fdc8b152eac3ef4e64_virlock.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-17_0d87288de14ca0fdc8b152eac3ef4e64_virlock.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-17_0d87288de14ca0fdc8b152eac3ef4e64_virlock
-
Size
312KB
-
MD5
0d87288de14ca0fdc8b152eac3ef4e64
-
SHA1
5bb4c19ac41e883562120bf0c15efcddcde5f3c7
-
SHA256
418b6cbb300367684509a5a4bf419ecff03697529f0156fa4aa3044d8da53c35
-
SHA512
49725d3e9831339315636c4d3e72823ee94d3b6b858a430e0d7ed14bd1da288a930b4052aedec304d21ad3c105a32f67a32cd6e5a0c8d05a1b094ac2c516781b
-
SSDEEP
6144:nC31YRj5yHl+SUortpN0/BeO2+7JOtbbbbbbbbbbbbbbbbbzv2zr2kGB:qOj5yHlNUoOeO24iEJGB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-17_0d87288de14ca0fdc8b152eac3ef4e64_virlock
Files
-
2024-05-17_0d87288de14ca0fdc8b152eac3ef4e64_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 307KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE