Static task
static1
Behavioral task
behavioral1
Sample
2024-06-13_10f5141d19c63e1f2770208b81ea4e54_virlock.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-13_10f5141d19c63e1f2770208b81ea4e54_virlock.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-13_10f5141d19c63e1f2770208b81ea4e54_virlock
-
Size
211KB
-
MD5
10f5141d19c63e1f2770208b81ea4e54
-
SHA1
2ea187c17134d14de7cddd0de98e1a91ed9e0d79
-
SHA256
9b491e2d73b6864890b41ecab4a1f24d0e1d8e72d6c0f1c7613cfc4e77c6a68f
-
SHA512
fb95fec92e6d5ff356afd27b9dbe8abad2ff65cf73ff679678f48a7e82e13b844ac0133231e80db9957a55b3b5e0553ca291e360065c1ee1305f608aa0092d45
-
SSDEEP
3072:EMggKxb5ct9NaLaViVzx4kLUzDi02owyqwZf2l9cz3nDMrA:fg3xb5qpnlzDegqwZ+9gAs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-13_10f5141d19c63e1f2770208b81ea4e54_virlock
Files
-
2024-06-13_10f5141d19c63e1f2770208b81ea4e54_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE