Static task
static1
Behavioral task
behavioral1
Sample
2024-08-17_822cb629eb3c849a5bd84d59a5b4f71b_virlock.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-08-17_822cb629eb3c849a5bd84d59a5b4f71b_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-17_822cb629eb3c849a5bd84d59a5b4f71b_virlock
-
Size
195KB
-
MD5
822cb629eb3c849a5bd84d59a5b4f71b
-
SHA1
88fa19298297c02c52a57d42c0f711d783ee032a
-
SHA256
b0d341c63471a773524300c2e857d30af7d0482466abba36eb233867f7bb136d
-
SHA512
2902cc0e7290c8d530b09b9ef80e9ff14dac74f5b3cc9dfbe573783939260d7bc2a3660b11fe76e2cdc620eda118c4b1ba63e0fe2df45d270ade1b9660db9c85
-
SSDEEP
3072:vPEHPKD5aA5/HYLrPvghBo7uQ0Xal96GyyPgUOJHD0NPq2ubQYP4PW:vsHPKNaAhHuvghBo7fb6GNOFC3HPW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-17_822cb629eb3c849a5bd84d59a5b4f71b_virlock
Files
-
2024-08-17_822cb629eb3c849a5bd84d59a5b4f71b_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 190KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE