Static task
static1
Behavioral task
behavioral1
Sample
2024-07-01_73f39a916af67b0b6f649295970c2a6c_virlock.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-07-01_73f39a916af67b0b6f649295970c2a6c_virlock.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-07-01_73f39a916af67b0b6f649295970c2a6c_virlock
-
Size
489KB
-
MD5
73f39a916af67b0b6f649295970c2a6c
-
SHA1
8f8af90797e6d33da0a75d4a04b51fd4c8d5aaf3
-
SHA256
ae7f24e262023f53c3f76ad03d458fdf6aa1e14ea759c59dadd2bdb74f309a75
-
SHA512
2bbd58baa5a749c6e5bc93bf430fb0c097ab90caaba2ae5555c128d08e03ea68493d72f06a7cbc5b61ce664e188e8349953a5b2730336180ccc26941161698f5
-
SSDEEP
12288:BWtoBZRmrShLDUFCtVJVW64UWMv/gBu5Fd:ItsjoGcCtVT22YBu5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-01_73f39a916af67b0b6f649295970c2a6c_virlock
Files
-
2024-07-01_73f39a916af67b0b6f649295970c2a6c_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 488KB - Virtual size: 487KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE