Static task
static1
Behavioral task
behavioral1
Sample
2024-06-10_3cf3275194dfe747b268d2972d887c8e_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-10_3cf3275194dfe747b268d2972d887c8e_virlock.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-06-10_3cf3275194dfe747b268d2972d887c8e_virlock
-
Size
643KB
-
MD5
3cf3275194dfe747b268d2972d887c8e
-
SHA1
1251ec56e89c8df482217c833474b7f1be74e808
-
SHA256
dc4ebc2ffebee490896acd89d0f8081ba5f06c7ad9b3a06cd2dfc6d9c3a5849c
-
SHA512
5bc0ca76a39a97a79d963c609f300ca851ed4795b4c6d6b39435adc32f601f0b0d8291f4dd4670c9b8657623d2db079eabb39fca8930b1c6fd8c101f77751e4a
-
SSDEEP
12288:G2YDfJ/TKXhikzTR4gGPqHjbO9rU8oBQ0yyKkKVr7:G7rKXhikegGOjbbBQlyKkKN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-10_3cf3275194dfe747b268d2972d887c8e_virlock
Files
-
2024-06-10_3cf3275194dfe747b268d2972d887c8e_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 642KB - Virtual size: 641KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE