Static task
static1
Behavioral task
behavioral1
Sample
2024-09-19_25a1d0abb30163894729863cf4434732_virlock.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-19_25a1d0abb30163894729863cf4434732_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-19_25a1d0abb30163894729863cf4434732_virlock
-
Size
192KB
-
MD5
25a1d0abb30163894729863cf4434732
-
SHA1
13f8a808c0ce73160ac8338241618f78272a9761
-
SHA256
b1b39c5ca08b51c27da9f52013cc9536b1404177ebf86924f3903f45d991c474
-
SHA512
5c9cd4e7b361d3bc6227a1a27ed50d937fbfe62dc2432e9a9358528f73ba54f7c91f5fa0c4ff041f749dfa4c72bc60181a2fe9b9406b7e657e43b16d41be7845
-
SSDEEP
3072:ycozV0qLijjj11GUbAAGTVTQS78RvvuKDg+6S0WmwPR72VAA:yhVkjjLuDd78RvvpDk1WlPRKV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-19_25a1d0abb30163894729863cf4434732_virlock
Files
-
2024-09-19_25a1d0abb30163894729863cf4434732_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE