Static task
static1
Behavioral task
behavioral1
Sample
2024-09-28_104e59cef3470ce4915d80db496fb109_virlock.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-28_104e59cef3470ce4915d80db496fb109_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-28_104e59cef3470ce4915d80db496fb109_virlock
-
Size
589KB
-
MD5
104e59cef3470ce4915d80db496fb109
-
SHA1
27f5ac8d3f186275af2e1eea63572b87f2b5f64e
-
SHA256
3d1df3956cdb5255861862af837a1941dba07c06c0c05e59da28267c9742ce44
-
SHA512
96d6bef93ea43fc0f99c1c0031b5d2472ca317ae7540a3502a023165c8f5363eb6f6c2a2a8df108ed7bd858136fcb9948be5086319ce66ebff86a3a1635b9711
-
SSDEEP
12288:2FpLz3Qn+gyCUYApdiM3iRm9dFOQsqUR89ZvgfTZT5LpEZ:IpLszAPh3oMFO2eREZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-28_104e59cef3470ce4915d80db496fb109_virlock
Files
-
2024-09-28_104e59cef3470ce4915d80db496fb109_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 584KB - Virtual size: 583KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE