Static task
static1
Behavioral task
behavioral1
Sample
2024-07-24_27e6798ed1bd41ec9be1db61882a1842_virlock.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-07-24_27e6798ed1bd41ec9be1db61882a1842_virlock.exe
Resource
win10v2004-20240709-en
General
-
Target
2024-07-24_27e6798ed1bd41ec9be1db61882a1842_virlock
-
Size
153KB
-
MD5
27e6798ed1bd41ec9be1db61882a1842
-
SHA1
22b21e3f499410c1a19fefe60de12579cf36f7b5
-
SHA256
3b09462581f4ca62a881333528dde89ff1ff620c323972fd4276897ba6d611b9
-
SHA512
40650b7680b6947ed1dd59b3893dfd71cb66a9223557ec23fc275000ada284d2d7c29ca4c04d5972c80cda015370012596b86e130a888ccd7f00255b2ab775b0
-
SSDEEP
3072:yFfbq3We33K7oyegiyV8fH9d2f4O+++++++++++++++++++Y/G3lgbbV:Mfm3/33K7bCwt++++++++++++++++++3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-24_27e6798ed1bd41ec9be1db61882a1842_virlock
Files
-
2024-07-24_27e6798ed1bd41ec9be1db61882a1842_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE