Static task
static1
Behavioral task
behavioral1
Sample
2024-10-14_ffe465bf2eacf9eeef96823f5ff8a85a_virlock.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2024-10-14_ffe465bf2eacf9eeef96823f5ff8a85a_virlock.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-10-14_ffe465bf2eacf9eeef96823f5ff8a85a_virlock
-
Size
158KB
-
MD5
ffe465bf2eacf9eeef96823f5ff8a85a
-
SHA1
12159af1693b3130b29b6e26315aa7f617d4a6ee
-
SHA256
10df2e2621e481d2dbb8ca05b7f68b25e3c8efc704cb168c4661d4489d902a0c
-
SHA512
9a966b7d205e45b6a8b491d6af5749af06d440b241d803bde93afa6c65d480edb2b41b15d9a3838c10fc676c35e21a57d448af2da8f025755f8f6a834467dcd2
-
SSDEEP
3072:eo+FaWuPrlBGcDle32ipGfXmxzthzTzrXWkyjDCE+VWlWFsWt2K4ZapX2QKN0BXW:9PXGSiECzbzrWkmDl0WlWFs62L0pQN0c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-14_ffe465bf2eacf9eeef96823f5ff8a85a_virlock
Files
-
2024-10-14_ffe465bf2eacf9eeef96823f5ff8a85a_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE