Static task
static1
Behavioral task
behavioral1
Sample
2024-06-13_f5fdf34c619977204f6c5d9e84ac5c22_virlock.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-06-13_f5fdf34c619977204f6c5d9e84ac5c22_virlock.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-13_f5fdf34c619977204f6c5d9e84ac5c22_virlock
-
Size
644KB
-
MD5
f5fdf34c619977204f6c5d9e84ac5c22
-
SHA1
3cc029aadd35e140e407450064ee41f8edf8a59c
-
SHA256
fafdcda98e5dcac9391bd27eaefade78d9d9a577fbf68f45bf12fa33c7c85f15
-
SHA512
1046a5d604b2a5095834b800a0ecdacada1e5b92892cee5245ccfdf46cd9455b0569c63d183b45aaa9089ef440fa8056582b2b1fac34166bae7f4527caf93367
-
SSDEEP
12288:fnQJlSrNCDFiA4vXl0Ypn8m760nOqIk8NqgC:PQri31tKm76cOqIJNTC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-13_f5fdf34c619977204f6c5d9e84ac5c22_virlock
Files
-
2024-06-13_f5fdf34c619977204f6c5d9e84ac5c22_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 639KB - Virtual size: 639KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE