Static task
static1
Behavioral task
behavioral1
Sample
2024-07-25_c78de67d2bc3e699117daa57b1d98c19_virlock.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-07-25_c78de67d2bc3e699117daa57b1d98c19_virlock.exe
Resource
win10v2004-20240709-en
General
-
Target
2024-07-25_c78de67d2bc3e699117daa57b1d98c19_virlock
-
Size
212KB
-
MD5
c78de67d2bc3e699117daa57b1d98c19
-
SHA1
4e1b9c0594ab0518b7db97ecf9cebb499a93815a
-
SHA256
c2f6d2ba1b04a6355a3b9c7806dec78614bd2413dd216ff10ef97e99828b4f49
-
SHA512
a0f6a84d5084bf97dfffd520913b148e2a71e5a147aee6dd881a874ad31b9b4789228946c029f34e89699f309a1d59ff7b59e19fe3fc78447b805eaea6b01d15
-
SSDEEP
6144:vToUt/lGnfTiCIrZjVwSBWoCj1/sL0YaCHzZ13lIECE0O:7btHrZjq048Hj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-25_c78de67d2bc3e699117daa57b1d98c19_virlock
Files
-
2024-07-25_c78de67d2bc3e699117daa57b1d98c19_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE