Static task
static1
Behavioral task
behavioral1
Sample
2024-06-01_d304902ecf034ddb3150c7d0c6a46843_virlock.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-06-01_d304902ecf034ddb3150c7d0c6a46843_virlock.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-01_d304902ecf034ddb3150c7d0c6a46843_virlock
-
Size
651KB
-
MD5
d304902ecf034ddb3150c7d0c6a46843
-
SHA1
0d9ec67a4f713acea60e34438c67cdcf0dcaab60
-
SHA256
30d74e3541e212e07176e7975b4a8317ba0df4d54176c0e3303b875fdf1a2631
-
SHA512
216eda26c1d604e4cb2be6abaa9e90d2e8c9ce823e235948bbbd99f7f584a26231b5c1d8e9ea1d36c846755c0ba2751a45822073c544147e4438634f55624c0f
-
SSDEEP
6144:yrRDFckYidYdCJJPXWZZITtWkP8imtlXvXEK0KiR1qc+r/EBd11CNBs6JQ4hjYuD:ydrYiiUJJfsZDkDmr/fc+a1epscwQT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-01_d304902ecf034ddb3150c7d0c6a46843_virlock
Files
-
2024-06-01_d304902ecf034ddb3150c7d0c6a46843_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 650KB - Virtual size: 650KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE