Static task
static1
Behavioral task
behavioral1
Sample
2024-07-03_56e5e38029b04ed87c8022a6c161612e_virlock.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-07-03_56e5e38029b04ed87c8022a6c161612e_virlock.exe
Resource
win10v2004-20240611-en
General
-
Target
2024-07-03_56e5e38029b04ed87c8022a6c161612e_virlock
-
Size
191KB
-
MD5
56e5e38029b04ed87c8022a6c161612e
-
SHA1
1d0e9c791065f3bc316e1693b0d03b03856af8f7
-
SHA256
30c008c337aac1b8aec216dcff692de076cfad567b1a599cfa6f7e824cd2fb57
-
SHA512
8d394e0ea85e7aafc080015c8d856c21eaf73c60e68739b937e6bbf73a134b5e2fa2fa872525fb26cfc7a5bdf3ff6b915676d24d695b0955f4554f3a83fc0bf2
-
SSDEEP
3072:Un2ZyM3fOMfEGS7n4rINo6Bn4WfnizCD1nE7608zhBE8fE4aFqRFdkfBvmc6:LZ/vO4kypL608FBtEMN2mc6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-03_56e5e38029b04ed87c8022a6c161612e_virlock
Files
-
2024-07-03_56e5e38029b04ed87c8022a6c161612e_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE