Static task
static1
Behavioral task
behavioral1
Sample
2024-10-04_19581a814730ae47294310eb0b933e65_virlock.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-04_19581a814730ae47294310eb0b933e65_virlock.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-10-04_19581a814730ae47294310eb0b933e65_virlock
-
Size
567KB
-
MD5
19581a814730ae47294310eb0b933e65
-
SHA1
f42e4c740fac746e8bc9aa5a560002be3f323fb5
-
SHA256
8ed28543066893878376c03d5a4608f6f74aa6f6ce3cc343c8c385423c2172a8
-
SHA512
6e0d539158be8192c4a368e174bb0ca0fa96cd5f2c6f9399dcc1b168abb6588dcb2d805ab8fa072814b212a63a53d3ec7bab671c88c7eb0c3f349e8ac65ee505
-
SSDEEP
12288:4DaOJYDeSEXc1f7MVMteDH3yjqbNcIq0bd:4D2Oc1f7MVMOXcqbWCd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-04_19581a814730ae47294310eb0b933e65_virlock
Files
-
2024-10-04_19581a814730ae47294310eb0b933e65_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 566KB - Virtual size: 565KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE