Static task
static1
Behavioral task
behavioral1
Sample
2024-08-10_c28f15bd3f8ae87e4ab9e71f1f1bb95f_virlock.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-08-10_c28f15bd3f8ae87e4ab9e71f1f1bb95f_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-10_c28f15bd3f8ae87e4ab9e71f1f1bb95f_virlock
-
Size
201KB
-
MD5
c28f15bd3f8ae87e4ab9e71f1f1bb95f
-
SHA1
f94b46eec779fec29cf0e828c22a8509f20cd18c
-
SHA256
c16ef4b2a3b491c9bf64dd6f65d8408692a2f33261fb37d9a8e8447337c7a4a6
-
SHA512
860f8d21d22f5bb4aac27f84d096b49f61622fc33f26176e308e480d2498de248bb979d9da7d345bd826ccb2383183db999b404963d8b2f7a709575829138b1e
-
SSDEEP
3072:RLagkgGwmRDd1zB4+/oBLttR5thjUWEKhqrDyjPC:8gcwsDd1e4oBVxCrDyjP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-10_c28f15bd3f8ae87e4ab9e71f1f1bb95f_virlock
Files
-
2024-08-10_c28f15bd3f8ae87e4ab9e71f1f1bb95f_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE