Static task
static1
Behavioral task
behavioral1
Sample
2024-08-22_45386ce59f9d626bcff8975a87277b3a_virlock.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2024-08-22_45386ce59f9d626bcff8975a87277b3a_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-22_45386ce59f9d626bcff8975a87277b3a_virlock
-
Size
651KB
-
MD5
45386ce59f9d626bcff8975a87277b3a
-
SHA1
119c1244b30636a9c03ecde413e27523a0d5c9d2
-
SHA256
0f65e582152d3267e9c2ec107e551f3c2f1990100637bd7103c24aca7f2b836d
-
SHA512
9aa39a67fbc0cd8bea850961ab9d1531da2486410849508e9b89cff82ba7123861140aef818509f0ee9da334b5546a9b8c7eeb8503dc7de47142b0c9b1201df6
-
SSDEEP
12288:sGomxDxHdyY2I4VZzO6GaE7gGNn3z3y/HLk48DWYycycMX:FoqHdyY2fVZzO6fKgkD3yYpycMX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-22_45386ce59f9d626bcff8975a87277b3a_virlock
Files
-
2024-08-22_45386ce59f9d626bcff8975a87277b3a_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 650KB - Virtual size: 650KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE