Static task
static1
Behavioral task
behavioral1
Sample
2024-09-30_2c0dae4b3442b0746267af7e27b22643_virlock.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-30_2c0dae4b3442b0746267af7e27b22643_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-30_2c0dae4b3442b0746267af7e27b22643_virlock
-
Size
187KB
-
MD5
2c0dae4b3442b0746267af7e27b22643
-
SHA1
f745ba88d1cef89c6454aacd29e48cd73cd34c11
-
SHA256
3bdee7390cd3651d6ad381d6a4602a8b454392408860dafd86dc226125798f63
-
SHA512
1d10a25b29ee4dd3ca5d5d6467ee3fc5faa9f47899f8c6c8bfedc5b412489cf28538f56f43942f7ae4e6dd3ee22dee0897fef4d2186ec1ca812ec341e984bac7
-
SSDEEP
3072:5+cMKeyk6E+Jy+M74CvtWWq972gIHgRtJ244JdZZyd8CR0RvA92mjZQ:wq5PEjvtWWq972d4JD4JRvANQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-30_2c0dae4b3442b0746267af7e27b22643_virlock
Files
-
2024-09-30_2c0dae4b3442b0746267af7e27b22643_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE