Static task
static1
Behavioral task
behavioral1
Sample
2024-06-03_5da566722f53646ff53d37f7cba8c6cc_virlock.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-06-03_5da566722f53646ff53d37f7cba8c6cc_virlock.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-03_5da566722f53646ff53d37f7cba8c6cc_virlock
-
Size
191KB
-
MD5
5da566722f53646ff53d37f7cba8c6cc
-
SHA1
a17e686e707fae490ca255673281e39816fe1baf
-
SHA256
3f64b5daae46e022a0ebb45b15a8aad010dfc164febe7ad7d2eb7221f8f7237c
-
SHA512
8fa394ac4d54dc36fb4af2a9904885ce963a1f5bba0730ad280274d300d992b69763f0bd5012dcbb713b49352cd8f50ef01705b3e9dc5a47fd52773daff74564
-
SSDEEP
3072:/tYwam2NI+Us50pD0llm8d9OvC4b0VgKC2Y8e/A3s4BkH8nxwZcjMaDBkwTiU1VF:VBuInseUQcOvmKKDm6xw0x8U1VAf39b8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-03_5da566722f53646ff53d37f7cba8c6cc_virlock
Files
-
2024-06-03_5da566722f53646ff53d37f7cba8c6cc_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE