Static task
static1
Behavioral task
behavioral1
Sample
2024-08-05_06400a3e579e1e4a7959ee04430d8e73_virlock.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2024-08-05_06400a3e579e1e4a7959ee04430d8e73_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-05_06400a3e579e1e4a7959ee04430d8e73_virlock
-
Size
111KB
-
MD5
06400a3e579e1e4a7959ee04430d8e73
-
SHA1
3c0e6093395ce0b5e04b29d4133524cc1cee740a
-
SHA256
01ae7c85e97cc73225f102cb03c3fd8e64a4807f1c45802216ec4af0a5c4c6cb
-
SHA512
082035067e3c1c506aed68d596709ca31d66c1303dfa7a8dc173b943eb51e1a3a5b9cd059989f5dad7d58e303dac2d5ef58487f92413fa57b5cfc38a9801f79d
-
SSDEEP
1536:bTM/B7uLbSBrK9Jafpcyl52dpQR+3y6xDlvBXCXuJT+pZT0V/4QqzowEl6t20Knp:bTeufV9JafD035xlxJT+p20cfk2nnp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-05_06400a3e579e1e4a7959ee04430d8e73_virlock
Files
-
2024-08-05_06400a3e579e1e4a7959ee04430d8e73_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE