Static task
static1
Behavioral task
behavioral1
Sample
2024-06-13_8789e6cc386d755c45842ea4145cda50_virlock.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-13_8789e6cc386d755c45842ea4145cda50_virlock.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-13_8789e6cc386d755c45842ea4145cda50_virlock
-
Size
2.6MB
-
MD5
8789e6cc386d755c45842ea4145cda50
-
SHA1
96ade1adbc3b95e51afeb34d7250d56b06b4c62a
-
SHA256
355c70d00bae859972f6a174e3ddf31e35be689f14cc639fe3889c5f54e06480
-
SHA512
a371bb5b71cd05874aacdd7ddb9f78ce2181e4f52cb690ca63fce264aa626b975d81a81e8758d0e3b1babecd25b381abb789e5707d4a7c0f2d91a4776319ed07
-
SSDEEP
49152:XizIU8yZ7Xr/ICSa/8OPC2Zpp2AnN/nHRq8Ef5SIainutI2Xf0zQoYrhSn0SAH8V:Ip8ygE3nNfHRq8Ef5SIainutIpzKpdcC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-13_8789e6cc386d755c45842ea4145cda50_virlock
Files
-
2024-06-13_8789e6cc386d755c45842ea4145cda50_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE