Static task
static1
Behavioral task
behavioral1
Sample
2024-08-25_2017af038563bf2b579212734c62b1ea_virlock.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2024-08-25_2017af038563bf2b579212734c62b1ea_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-25_2017af038563bf2b579212734c62b1ea_virlock
-
Size
184KB
-
MD5
2017af038563bf2b579212734c62b1ea
-
SHA1
287d8b6d5e320fd5300417b1b96bd5f3edea9aee
-
SHA256
98c9c32c5d8642320818816994c8fd7d2c62216c34ac3c47cb22244a263bd20a
-
SHA512
71622b13d8a4b7841eb74ee0e8be7b99c3b93f1c1930cd5fb9880f6cc615085fe049b66f55fbd6b9fda9a716be7d3aaed35371186bdcea586c53130aee4c3107
-
SSDEEP
3072:I2ZbRyHXNyalMRFMBdhV/RKJJJJuARwELHNjGfSV2YF2a/zpgN:IKbRAXNy5RFM/A28yfSV2YFNz6N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-25_2017af038563bf2b579212734c62b1ea_virlock
Files
-
2024-08-25_2017af038563bf2b579212734c62b1ea_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE