Static task
static1
Behavioral task
behavioral1
Sample
2024-09-15_f650688e7d74259c63dc3adaf8fec6d7_virlock.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-15_f650688e7d74259c63dc3adaf8fec6d7_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-15_f650688e7d74259c63dc3adaf8fec6d7_virlock
-
Size
650KB
-
MD5
f650688e7d74259c63dc3adaf8fec6d7
-
SHA1
7d3fba170bf3000ebc4eca6fda748785759e2430
-
SHA256
b0d104fa69eace1f9b0fc0bc4858ccef28793aa59fb13ee860b3876418309c39
-
SHA512
87e1be7b081686f83f79f17d826169df486b5fa4aa5818ff63d6dca8f40f52be0ff0f4c7f1f1e3f916dbd94bac203255fcb670217d1fd3328ceb9c77c018eb8f
-
SSDEEP
12288:MlLRcYCV6+y647iUiVTvgrftJa3mLtKz9gdRAEeeUm1Bht1RnrKbpMBZtdFEAj3w:cSt94RDkmaOFzA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-15_f650688e7d74259c63dc3adaf8fec6d7_virlock
Files
-
2024-09-15_f650688e7d74259c63dc3adaf8fec6d7_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 649KB - Virtual size: 648KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE