Static task
static1
Behavioral task
behavioral1
Sample
2024-08-06_b4e289aa22cc4626ff25364ab80ef854_virlock.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-08-06_b4e289aa22cc4626ff25364ab80ef854_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-06_b4e289aa22cc4626ff25364ab80ef854_virlock
-
Size
657KB
-
MD5
b4e289aa22cc4626ff25364ab80ef854
-
SHA1
f54ea3db92f8d71cec333d72a0939e2a822ea994
-
SHA256
21eed8d6342f42948d0221b23bc399d826a3be957293bc437b426e5824adc1f6
-
SHA512
0362b42b969fb1b946c0c2e3a8e7fb3e02151a825e0da1d22e9b34fd9b29419ae9e41fde36c7f60ec359954f7e6f98f4effed9efa9024621e7ecc31cd4456903
-
SSDEEP
12288:6uJWTMqFsaMOjthl1cNev2J8mg5lLOvd8W9L8QNio:6uJWTMqSGj51cNCmmLkhX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-06_b4e289aa22cc4626ff25364ab80ef854_virlock
Files
-
2024-08-06_b4e289aa22cc4626ff25364ab80ef854_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 3481.7MB - Virtual size: 2005.2MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
u��50�* Size: 2697.6MB - Virtual size: 2736.4MB
IMAGE_SCN_CNT_CODE