Static task
static1
Behavioral task
behavioral1
Sample
2024-09-05_382ec3dca6f380060f0182c150d1ba57_virlock.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2024-09-05_382ec3dca6f380060f0182c150d1ba57_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-05_382ec3dca6f380060f0182c150d1ba57_virlock
-
Size
117KB
-
MD5
382ec3dca6f380060f0182c150d1ba57
-
SHA1
f108ee4221dbf004705dfdba4bed5aa985bbfb77
-
SHA256
230339f98d3c4f6cd51529e3236bc66efe02cd85162f60deacce34f9eb4457cc
-
SHA512
9fd69ed8a48ce109b9f8ecb0520a333c082e1678f0972903a5c89bf47ee615849b86a0d5ca37786f0e2dd1e76514cf5b28eb692e32aaca7361e1ea56208ace53
-
SSDEEP
3072:1YeeqXNN4Tq239K2ua/a8AL8bJhZRgOswE8pT7JI7o+faL3q6vCKKMzo:74TztKK+fcZvCt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-05_382ec3dca6f380060f0182c150d1ba57_virlock
Files
-
2024-09-05_382ec3dca6f380060f0182c150d1ba57_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE