Static task
static1
Behavioral task
behavioral1
Sample
2024-09-15_6d0b2119dbf6c6873b9a1924ba1edd8a_virlock.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-15_6d0b2119dbf6c6873b9a1924ba1edd8a_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-15_6d0b2119dbf6c6873b9a1924ba1edd8a_virlock
-
Size
196KB
-
MD5
6d0b2119dbf6c6873b9a1924ba1edd8a
-
SHA1
f91697f45dc7bde04989b88e3a4177628b40bacd
-
SHA256
d093911314010fb154d43683a65ec25e548fbfd479fbc43ca8157774856075cb
-
SHA512
9b44363d62c96f46503017cc3eb586220849aa510f24fc9634aaa477331a997f96e234963f4dbf4bdf5f945ba6fff203bf8663ad237048db099c6705a219d892
-
SSDEEP
3072:eYyI+awa7m8sUjMqXWLfr+ddeclk/jVBiEOaInZ9V8r+QLVTlOkQuLSf7O:bwa9XjMe3nCOEOJZ9mr+QLVT/QuL2q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-15_6d0b2119dbf6c6873b9a1924ba1edd8a_virlock
Files
-
2024-09-15_6d0b2119dbf6c6873b9a1924ba1edd8a_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 195KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE