Static task
static1
Behavioral task
behavioral1
Sample
2024-05-17_0afff492d962f1f2d77416201419907a_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-17_0afff492d962f1f2d77416201419907a_virlock.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-17_0afff492d962f1f2d77416201419907a_virlock
-
Size
216KB
-
MD5
0afff492d962f1f2d77416201419907a
-
SHA1
03b09a464a8fae2fbcf3f5af57853f4921188534
-
SHA256
82832d0fdd7def93728eae869f2d8147f088e442d91cc94cc961fc8d7ce9539c
-
SHA512
0a0c87f2d0ed4ed521eae19add0155d2668b335e837fb3a5bbffe5cbd8bf10ae836ac613cdc484cc261385e9fc3d8792d525e3d4eb30095614c853ff9a7deb3e
-
SSDEEP
6144:xY13d4gN0d3aJq4ecQD46pqTp4i/kjdUzne1+E:0e8kRRD46C4LdB1d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-17_0afff492d962f1f2d77416201419907a_virlock
Files
-
2024-05-17_0afff492d962f1f2d77416201419907a_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 211KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE