Static task
static1
Behavioral task
behavioral1
Sample
3c0f20c780c80eeb5fdc6908a6f92812_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3c0f20c780c80eeb5fdc6908a6f92812_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
3c0f20c780c80eeb5fdc6908a6f92812_virlock_JC.exe
-
Size
313KB
-
MD5
3c0f20c780c80eeb5fdc6908a6f92812
-
SHA1
a5c953be5c2f367d9cd87f3745d893bb237abcb8
-
SHA256
dfb154197c9a7c90c4782531779eef5964e2da63c429b397e6bfdc8e4d7ff6e5
-
SHA512
7f4961a8fe7f0ac792d8660b46a46e307675e23a413890d64ea90ad2d225cfb3da86d53f51594db8c6cdbf28efe9a004b90bbe86c22d9ca94c2a4cf177974efc
-
SSDEEP
6144:xGNKK/Fvg0mST/o1O+x7DG4YInoAJLcsnFk6QISxIuaplR:xCv8oPk7ioLLFavaplR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c0f20c780c80eeb5fdc6908a6f92812_virlock_JC.exe
Files
-
3c0f20c780c80eeb5fdc6908a6f92812_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 308KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE