Static task
static1
Behavioral task
behavioral1
Sample
363926724d6f68484a705080d701659a_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
363926724d6f68484a705080d701659a_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
363926724d6f68484a705080d701659a_virlock_JC.exe
-
Size
201KB
-
MD5
363926724d6f68484a705080d701659a
-
SHA1
9ac1a3c1b05a7ad40fd1ce05f6c3e9df9c0db291
-
SHA256
75ff561ca98e8b5283f3c5b7b8e1478bca950af64e6a74e314717c8e03c04946
-
SHA512
afeffa3d08453d82b2d8ffc7773ba47aebebab032bf36c211eb14a418df58cde72b6f384acbb2ebff296dfdc0c3cbd1c482e0df49efe894edeab9f0089deb33b
-
SSDEEP
3072:lr3eC6Nhq5Tcyy4HwUXwxeIzA39kofbz7yRkhbcysxHCDRY+6f+M:tcCT44Q3+TvfFd7DRY+6f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 363926724d6f68484a705080d701659a_virlock_JC.exe
Files
-
363926724d6f68484a705080d701659a_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE