Static task
static1
Behavioral task
behavioral1
Sample
2024-05-29_020b4284304f0d1ddcbdc0bcf6d784dd_virlock.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-29_020b4284304f0d1ddcbdc0bcf6d784dd_virlock.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-29_020b4284304f0d1ddcbdc0bcf6d784dd_virlock
-
Size
645KB
-
MD5
020b4284304f0d1ddcbdc0bcf6d784dd
-
SHA1
72821dab2eb1a400da8b292aaedccc65d7fb340d
-
SHA256
750ce647536cb02eaa6932323f3ace5d0db5bb3839b7a7452bb0e68178942e27
-
SHA512
aa4ab3e72217f205df2bcde5c92cd979ee56e003882f11e3a30fbc7331c99a801e1dcaf2c5e48936d190bacedd65b30aca1761bb7579d8580c263c61d9109a8a
-
SSDEEP
12288:bFPuP60KqpUlMLEetPcAL9NbMMJ1qpRLCLh0q5XKML7A5v0DTDnvkTm3QAxahTDQ:bcbKmUlMLEetEK1MS1qpABAc7xkhTDQH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-29_020b4284304f0d1ddcbdc0bcf6d784dd_virlock
Files
-
2024-05-29_020b4284304f0d1ddcbdc0bcf6d784dd_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 644KB - Virtual size: 643KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE