Static task
static1
Behavioral task
behavioral1
Sample
2024-09-07_7ab738cf71501fb260904a93d13c12aa_virlock.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-07_7ab738cf71501fb260904a93d13c12aa_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-07_7ab738cf71501fb260904a93d13c12aa_virlock
-
Size
142KB
-
MD5
7ab738cf71501fb260904a93d13c12aa
-
SHA1
29d2b9da06ac83d0b734472b371afeda0e555d6b
-
SHA256
23f88efca2c9fafcd64acc9e819fcec6b3236c78fcbd26ee2ee1d3efbc9ff6b8
-
SHA512
9202c8194efd32f949127eb093ca4c74081a22645d76e291dcb526a1f1d799e207e66c4937ef2ad16cfd2cbed3ee80ebc79b284c171399511186c8806608d82d
-
SSDEEP
1536:4H/upG7QSgY2kEI6lWDnWv2WHAFBBwdwH4LmwiPw28WqXQNRoicpQYb1mrAGAoBD:+57eGUeVh4IF25crUiSFpSFtd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-07_7ab738cf71501fb260904a93d13c12aa_virlock
Files
-
2024-09-07_7ab738cf71501fb260904a93d13c12aa_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE