Static task
static1
Behavioral task
behavioral1
Sample
2024-10-17_5f9663a7f1e4787dc7ea9d53d9498d5c_virlock.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-17_5f9663a7f1e4787dc7ea9d53d9498d5c_virlock.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-10-17_5f9663a7f1e4787dc7ea9d53d9498d5c_virlock
-
Size
638KB
-
MD5
5f9663a7f1e4787dc7ea9d53d9498d5c
-
SHA1
234fadaf73a6b4755cdf30578d3e08514bbcfdc5
-
SHA256
141e17f2296a1e62bcf9d48f0f2ba6b7aebb0c10b5ae2c8eb61ef72e3806156e
-
SHA512
89eee652c81267d2ccb5469cd24e2500d2c4443d5d69c1090d6cdbf5ea73558830f664aa7240032dd01235f39f7a8d322ba3e84f666495776c8e48e39a1f48fa
-
SSDEEP
12288:FRTNwhK9NJ6d4yzllkBPconkxyg1Rg55kc+dGJr0DoWE220PMZCBZnK:FRZq86Gns1K5KZd2H5220PyIZn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-17_5f9663a7f1e4787dc7ea9d53d9498d5c_virlock
Files
-
2024-10-17_5f9663a7f1e4787dc7ea9d53d9498d5c_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 637KB - Virtual size: 637KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE