Static task
static1
Behavioral task
behavioral1
Sample
2024-05-24_fe76d50d9f53af82d52d1ac30bd19823_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-24_fe76d50d9f53af82d52d1ac30bd19823_virlock.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-24_fe76d50d9f53af82d52d1ac30bd19823_virlock
-
Size
264KB
-
MD5
fe76d50d9f53af82d52d1ac30bd19823
-
SHA1
3e56599b9c66485a91610dd0847af747f4660c28
-
SHA256
79062654de62a1aad6bedaf516c1d558b57a440f557d16d713971a86823961a0
-
SHA512
3d61dbbbf9c81edc9dc881487039790c32f6ea3bd50a932b094510765e8ff43a61db1a2b367e02d89a6534b2346c4e0343c49805a1bb2c5cc9e3c260dedae6d0
-
SSDEEP
6144:Spy762efcffeGfffZhCffF+ffW+ND94cWNreDi6PcPUh1SuWjbY:uJfcffeGfffmffQffW4Kcg0i6PcUfwjb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-24_fe76d50d9f53af82d52d1ac30bd19823_virlock
Files
-
2024-05-24_fe76d50d9f53af82d52d1ac30bd19823_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 263KB - Virtual size: 263KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE