Static task
static1
Behavioral task
behavioral1
Sample
2024-09-27_0657d521e71771dd91b05afb7ad63f7a_virlock.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-09-27_0657d521e71771dd91b05afb7ad63f7a_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-27_0657d521e71771dd91b05afb7ad63f7a_virlock
-
Size
203KB
-
MD5
0657d521e71771dd91b05afb7ad63f7a
-
SHA1
ffc196c3181559d7c2ae80354ded35d058818dbb
-
SHA256
d6b937bfaf0bd769430eda1b2d66537e88218672e794318ffcd9871a807313d3
-
SHA512
370cd85b7b1aab00a1c879225056b95e0bbfc9cb663fdd94ec078524bc5ab3951210fb573dfb8f99ed80dc105f302005734712c5308dc172f651cb5fdd0dff5a
-
SSDEEP
3072:SeUfiKLmN6TPFZTt/2cpwY/hrk6i7nr7AQDOnA+fl2pEIykIskpcq3hlHH2CnTDx:9EiSsfD1CA+fR9kIsE3jHhTw8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-27_0657d521e71771dd91b05afb7ad63f7a_virlock
Files
-
2024-09-27_0657d521e71771dd91b05afb7ad63f7a_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 198KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE