Static task
static1
Behavioral task
behavioral1
Sample
2024-10-01_aee81d1e2684e5403089936963f8c201_virlock.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-01_aee81d1e2684e5403089936963f8c201_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-10-01_aee81d1e2684e5403089936963f8c201_virlock
-
Size
453KB
-
MD5
aee81d1e2684e5403089936963f8c201
-
SHA1
4cb3919ab84f37a65fc5bd9a7eb146974cbf2553
-
SHA256
1495442ab9ff93aae0a9580f4fc0077be77331cc73913b0aedcfb7be3af0e6ca
-
SHA512
499c3096e2e28fd0c5bcb6c774b479094063fdb1a2a3d5c067fa9fbf345aa27becf6438871d268b828df75f175bb3c739bb12431a1eae195208d0ab0c2e6d4e5
-
SSDEEP
6144:5ardjGG+Mzf8zBPTjt35jan3DCdODh9gdDI8ui1asrbbmlQ3K+WNtNIfdm:idyG+yfqTjt35janTNDh9gdDIxKM/If
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-01_aee81d1e2684e5403089936963f8c201_virlock
Files
-
2024-10-01_aee81d1e2684e5403089936963f8c201_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 452KB - Virtual size: 451KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE