Static task
static1
Behavioral task
behavioral1
Sample
2024-11-19_addad1124ca3962a6f1d947e8c8dfb79_virlock.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-11-19_addad1124ca3962a6f1d947e8c8dfb79_virlock.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-11-19_addad1124ca3962a6f1d947e8c8dfb79_virlock
-
Size
110KB
-
MD5
addad1124ca3962a6f1d947e8c8dfb79
-
SHA1
4f41021091b35a4b58d68d4b0d950c980de78082
-
SHA256
940112b3e6e9d6b191a08b666a2b018df5075020d2a96aaa9da9aef344aae985
-
SHA512
361e891862340cf931ec4c43d0a47b0f7f3d9ff212a09050a2d347243e17fa438df89857bbfd199f708a1423e2bb5b19d8beed7880723567d71ac545cbec4692
-
SSDEEP
1536:qbMkKowv9p3EvUbs7KdaDKQuBjIoJWvc7TmHTaY5FPX0IJEEpECTc60pSEkZGnUq:foGW4aQj58UdY/vhEEmCrjZcUruj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-11-19_addad1124ca3962a6f1d947e8c8dfb79_virlock
Files
-
2024-11-19_addad1124ca3962a6f1d947e8c8dfb79_virlock.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE