Static task
static1
Behavioral task
behavioral1
Sample
29815b2d26cb849b4cdd7ff59f812692_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
29815b2d26cb849b4cdd7ff59f812692_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
29815b2d26cb849b4cdd7ff59f812692_virlock_JC.exe
-
Size
224KB
-
MD5
29815b2d26cb849b4cdd7ff59f812692
-
SHA1
12f6dd2e6a75d63eea7ed327805f7b04f57c3cc0
-
SHA256
97576e1614186c708377d72359f25b3b8f5f9fc27283929e03e56219e35232b2
-
SHA512
262f7f97aa1cabaa59819756ae670fed3ee76c58e99f355025af703e42f7e9467bc86a99c64f5e7adde165adf33d2085f3fa3de64c3ccfd473268222a9f45c04
-
SSDEEP
3072:o4fwPd9PVBQ8dmx3dtO0cPlDJBFzMRrijPalE1Ncno97FP:o4YVBQ8d1rPpTFzzjPjjwoX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29815b2d26cb849b4cdd7ff59f812692_virlock_JC.exe
Files
-
29815b2d26cb849b4cdd7ff59f812692_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 210KB - Virtual size: 209KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE