Static task
static1
Behavioral task
behavioral1
Sample
2024-06-03_bf450f9c722e5fc5786ef3e7c9f7fb33_virlock.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-03_bf450f9c722e5fc5786ef3e7c9f7fb33_virlock.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-06-03_bf450f9c722e5fc5786ef3e7c9f7fb33_virlock
-
Size
6.6MB
-
MD5
bf450f9c722e5fc5786ef3e7c9f7fb33
-
SHA1
11c11d603295442790ea4b458f3f397bfd35633c
-
SHA256
323881ee14acf32cb4a97e5aaf879b5e900374c3de5b6e570f56ba39bce4651a
-
SHA512
616570861acec05b00c2944d055f2a54c2568ace7a7eeb6a86e3c602dcda0dd704136acc5ae6e3de3dd4f11e8d9f7bc8b9451da84f1d249247d768c981033e02
-
SSDEEP
49152:I/OnoO/mK4xMvHx3zX6VyBjlB67dlsHbFe9uFO6igmD/2Mleb4pAFzDJYlf:5noLK4ASfGk983itlBpYqf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-03_bf450f9c722e5fc5786ef3e7c9f7fb33_virlock
Files
-
2024-06-03_bf450f9c722e5fc5786ef3e7c9f7fb33_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE