Static task
static1
Behavioral task
behavioral1
Sample
2024-07-06_043cf90ceb26a388d0e997ecc0aec38f_virlock.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-07-06_043cf90ceb26a388d0e997ecc0aec38f_virlock.exe
Resource
win10v2004-20240704-en
General
-
Target
2024-07-06_043cf90ceb26a388d0e997ecc0aec38f_virlock
-
Size
563KB
-
MD5
043cf90ceb26a388d0e997ecc0aec38f
-
SHA1
7feab0a8ccfd01f0b6f450869145fdce994d6421
-
SHA256
17137e3603fdb08693bd70cd6902c8b98497d70333b2591f4ceb0ebf9cfdbe5a
-
SHA512
8a7a54fe3848ecd1c239ed4c3b1fb3690e3504a8d34db0af92534960e3fbab7f5c49b8c3e99d8d13c8a8ba0b6392ac0c6c351a7ab30585417104594b70f6ffa8
-
SSDEEP
12288:b1MtDF87h+/FGPaz968xrrbJS74n066IO:SF8t+dT9TNr6I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-06_043cf90ceb26a388d0e997ecc0aec38f_virlock
Files
-
2024-07-06_043cf90ceb26a388d0e997ecc0aec38f_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 562KB - Virtual size: 562KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE