Static task
static1
Behavioral task
behavioral1
Sample
20240920ded4167c3af8b568ba55b1b4f1e4411cvirlock.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
20240920ded4167c3af8b568ba55b1b4f1e4411cvirlock.exe
Resource
win10v2004-20240802-en
General
-
Target
20240920ded4167c3af8b568ba55b1b4f1e4411cvirlock
-
Size
594KB
-
MD5
ded4167c3af8b568ba55b1b4f1e4411c
-
SHA1
a4775eb3fa1285bfc17127ec421a0b9739345194
-
SHA256
e4bf0ada567b4b07493c487bdb2141a93bdc864938039d1312f7823a5c6d66c0
-
SHA512
e0ec7c5af8949381e70e48e82bd9082f99363f976f3a054949b1af0d9b6da841082c9da7c61da1e95f214bd5610f2d92102dc41ef1941e0af55fb661881fdcb3
-
SSDEEP
12288:yNYscz7ybajpHgG2gPU33mo9orabR55HlmsjN+S0zz+9wFt8j4NUX9+9HlA1A5OY:yNLczWo32N3mo9o/mhb4HNb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20240920ded4167c3af8b568ba55b1b4f1e4411cvirlock
Files
-
20240920ded4167c3af8b568ba55b1b4f1e4411cvirlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 593KB - Virtual size: 593KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE