Static task
static1
Behavioral task
behavioral1
Sample
2024-09-14_2cba2485b103c6fd5a2cfb6e2a91c487_virlock.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-14_2cba2485b103c6fd5a2cfb6e2a91c487_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-14_2cba2485b103c6fd5a2cfb6e2a91c487_virlock
-
Size
886KB
-
MD5
2cba2485b103c6fd5a2cfb6e2a91c487
-
SHA1
81c1eacad93e5f675eef66f855407234b77b445e
-
SHA256
ad2e61aafb42287c0ec8ecf2c0bc654f82163d618270563260ec90304c27ac6a
-
SHA512
0c1de7285dc8f033e88e0269bf2c80c4dff1e55a1ccd721e4b4978838a53eebafdda8645ba155447e79296eeffb055ea65c37e09a393a9f52d045b130c8eb876
-
SSDEEP
24576:06fqYu/CMrr4FI10+iL4dOWkiMxr2wZVO/3xpU:OrL7i0dpNMxSwzi3E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-14_2cba2485b103c6fd5a2cfb6e2a91c487_virlock
Files
-
2024-09-14_2cba2485b103c6fd5a2cfb6e2a91c487_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 885KB - Virtual size: 884KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE