Static task
static1
Behavioral task
behavioral1
Sample
2024-07-01_ab596004f0f57739ab61d3b57e6ebb73_virlock.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-07-01_ab596004f0f57739ab61d3b57e6ebb73_virlock.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-07-01_ab596004f0f57739ab61d3b57e6ebb73_virlock
-
Size
202KB
-
MD5
ab596004f0f57739ab61d3b57e6ebb73
-
SHA1
1644f8e187bd954dbba323440422bd69f6d5d0eb
-
SHA256
cd1b40e026d1b2dcc2b59a0d63cd5e3968259ec8651894a19264c4a225f0a31b
-
SHA512
76290305fb2c01f30187b9a7c7846e88773211e3e4dfa41fad93507b40ad802bce3a98002e78786e6b205b04474978ceb444954d2893e9cf130b4a7d3b280c1b
-
SSDEEP
3072:3U7vJem6451b/uid+J6IceKA1W6lq1H2If/vKBl5e7JzKOUTRLIDm:ELU42iU6IceK6hlgHBfnKBi8vTF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-01_ab596004f0f57739ab61d3b57e6ebb73_virlock
Files
-
2024-07-01_ab596004f0f57739ab61d3b57e6ebb73_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE