Static task
static1
Behavioral task
behavioral1
Sample
2024-08-22_de15fb73db82a8a84571508e7037d1c1_virlock.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-08-22_de15fb73db82a8a84571508e7037d1c1_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-22_de15fb73db82a8a84571508e7037d1c1_virlock
-
Size
565KB
-
MD5
de15fb73db82a8a84571508e7037d1c1
-
SHA1
9a806d913c04b50631890677b65f49065bb2e8d4
-
SHA256
4dfb5df8bc473145a1f8e044d7753fcab551d91b86f225183134bd8f06a24262
-
SHA512
da57f2d6c7fd43bd8b34c82716d6b2c1f20779ebbc401dcfd6ef6eaa9d15115bf5676478b41282da3a210d4adce2c6f1582f2f06649014d16f3e829deac9a0b1
-
SSDEEP
6144:oqSwNzpcFHHCevCjJhZHk1uWUSwYiKaXvDPy3Iff34qe7riTTDtFBq49DWyq1yZa:nSgzpcF4jJhZQuRSJygAotpYG41Vq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-22_de15fb73db82a8a84571508e7037d1c1_virlock
Files
-
2024-08-22_de15fb73db82a8a84571508e7037d1c1_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 564KB - Virtual size: 563KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE