Static task
static1
Behavioral task
behavioral1
Sample
2024-09-30_951c1977cbb8a81d6a00213688dfe5ba_virlock.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-30_951c1977cbb8a81d6a00213688dfe5ba_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-30_951c1977cbb8a81d6a00213688dfe5ba_virlock
-
Size
138KB
-
MD5
951c1977cbb8a81d6a00213688dfe5ba
-
SHA1
25f9b3173a78cba0ff4f4d7e653fd9d238d577ff
-
SHA256
a1826b181f099e07929608398241eff9dac160913ed400a319b0d26c6e541626
-
SHA512
18de25f5ae53e70df19ee66a15b01638a67263bd172a6292da30b1582123d5b1ae431f674c5f0a5e904896d832b7c95051b820613d22f9c296e5cb09cc5263fa
-
SSDEEP
3072:klFLoZauFKGu5jxh9fUGQuQbcwfz1enqryWqKVRQhxHWRZsKO6L1mwy4gncZVuYC:iVoZau45hc9UxHG7LD6ncZVuYBztsyq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-30_951c1977cbb8a81d6a00213688dfe5ba_virlock
Files
-
2024-09-30_951c1977cbb8a81d6a00213688dfe5ba_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE