Static task
static1
Behavioral task
behavioral1
Sample
2024-09-07_54016f15948baa3dc1c126982e0a5718_virlock.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-07_54016f15948baa3dc1c126982e0a5718_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-07_54016f15948baa3dc1c126982e0a5718_virlock
-
Size
205KB
-
MD5
54016f15948baa3dc1c126982e0a5718
-
SHA1
5fc08020075a58361c822a932c6d528e65aaa69d
-
SHA256
03031078840f555be8c75293818c5f89681f68c62d81954f3712559782bc481f
-
SHA512
c2c917a0902c1de519f3166aea4bbe6e0c82275c2aca2ea2a29de546d3232a0a64ee83d09f5ba6e94cefa43a6096b76456f93233ce8513b0bb22f0eed45d710d
-
SSDEEP
3072:2H8Ox3d64uU4bVaSi4m/wCnxFNyqOv4J9Lf1ODlIGxsk:2H8Ob6pT8Si48wCnFyBwrs5IST
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-07_54016f15948baa3dc1c126982e0a5718_virlock
Files
-
2024-09-07_54016f15948baa3dc1c126982e0a5718_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE