Static task
static1
Behavioral task
behavioral1
Sample
2024-08-18_43d33333a448a0942e99bba9f496e874_virlock.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-08-18_43d33333a448a0942e99bba9f496e874_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-18_43d33333a448a0942e99bba9f496e874_virlock
-
Size
120KB
-
MD5
43d33333a448a0942e99bba9f496e874
-
SHA1
480a4a3cdc52b08f24ac2638083b281ced9bb43f
-
SHA256
159b9b97ee20d9f7d7567f23f573abaa4dead109a85b3c0bdad75573227757c9
-
SHA512
e5668573344d4f0758d2c4d58871f76bcc35bddddedeeec976e9bf301b06c725e8d45e693b6b645c56dc4b310ad969dab147feb518f0241c4fb7f0a3d3d7fc6c
-
SSDEEP
3072:fd+Zu193wlnAjICq84qeXZuMQbbfBdKGXr/5Mbkn:fdCw93wlnpF84qeXIMQfX7BMW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-18_43d33333a448a0942e99bba9f496e874_virlock
Files
-
2024-08-18_43d33333a448a0942e99bba9f496e874_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE