Static task
static1
Behavioral task
behavioral1
Sample
2024-09-08_ae8b579bebfdf0e81ddb82c106a2e939_virlock.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-09-08_ae8b579bebfdf0e81ddb82c106a2e939_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-08_ae8b579bebfdf0e81ddb82c106a2e939_virlock
-
Size
205KB
-
MD5
ae8b579bebfdf0e81ddb82c106a2e939
-
SHA1
0fb106532fa739178bc893234c698a155d4f6f3f
-
SHA256
f04a11996b2a97100a65a7a0dd3e3b08e06c0714413ed5cf62a6e8cd746c793b
-
SHA512
16e7b94f1b64111bbe2ff063eccdce2a9066f38714e027753e123b4fa9b3533980dba6ca290ad375384dabef3eb2a4882db991869ff9db43c911dee372462b85
-
SSDEEP
6144:tzomEpqj0rBVCPnv5y3n7HBg3mYHFAbgv8Cd3JNOJBsvXeCP554ui/:Zoc0rBVQnB2HBg3mYHFAbgv8Cd3GDgXs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-08_ae8b579bebfdf0e81ddb82c106a2e939_virlock
Files
-
2024-09-08_ae8b579bebfdf0e81ddb82c106a2e939_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE