Static task
static1
Behavioral task
behavioral1
Sample
20240527ae5e83810a50af1205592f8ba24638bcvirlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20240527ae5e83810a50af1205592f8ba24638bcvirlock.exe
Resource
win10v2004-20240426-en
General
-
Target
20240527ae5e83810a50af1205592f8ba24638bcvirlock
-
Size
637KB
-
MD5
ae5e83810a50af1205592f8ba24638bc
-
SHA1
8e022cea6bf939907348e3bf0a2b4d61f95f26aa
-
SHA256
e8e617fa83e41e3a67aadef1dee63ec5af424ee7e1351f5dae2c84bd0b975b2c
-
SHA512
dc18aaf9a67207a2cc4ef2e048ec0d5f17cf0be1b2a624952fce99b5d493e6e1f29b2d89631daba565cb2e8a0cdd4665587b9c54ae88df27ddaba25c66a1fbcd
-
SSDEEP
12288:7eLt068nSHUeu/kes6ofzXiDsZ8dJKk5:Zeu/kes6szXiDTdJK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20240527ae5e83810a50af1205592f8ba24638bcvirlock
Files
-
20240527ae5e83810a50af1205592f8ba24638bcvirlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 636KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE