Static task
static1
Behavioral task
behavioral1
Sample
2024-08-25_43cfc223b3c83a367203047d1cf2836c_virlock.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-08-25_43cfc223b3c83a367203047d1cf2836c_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-25_43cfc223b3c83a367203047d1cf2836c_virlock
-
Size
211KB
-
MD5
43cfc223b3c83a367203047d1cf2836c
-
SHA1
c1d015ac554cfaa524fd838ecfe47c163ac0ada3
-
SHA256
67d72fe0873759010a39094005532c57b1971dcd3f80e7d6f76a4975741ee618
-
SHA512
399cfb938bf9bff6895631f8025bccef5d8deb8e603e588e6c2eed9ec6267f7a0aeda9465dd9707ded0cb9bd0df697ad7971f28aa94dd570a79e376fdaf6be82
-
SSDEEP
6144:fX1BxA5li4ZCTGKmH+t5f4bQ0JHc0a7OC2pLpy5m1CSobUhjd30o4TJ2A5Ct:f/xInLKYq0a7OC2pLpytU/30o4TJ2A5m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-25_43cfc223b3c83a367203047d1cf2836c_virlock
Files
-
2024-08-25_43cfc223b3c83a367203047d1cf2836c_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE