Static task
static1
Behavioral task
behavioral1
Sample
3e378b12dbff53d2d2171deb0329aefe_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3e378b12dbff53d2d2171deb0329aefe_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
3e378b12dbff53d2d2171deb0329aefe_virlock_JC.exe
-
Size
191KB
-
MD5
3e378b12dbff53d2d2171deb0329aefe
-
SHA1
077197d363ad69420b031b979cb1609a5cba30fc
-
SHA256
1e96b3592abc5fb81d9d681643d5301dff169abf8d3951e70e35e6a973d4c199
-
SHA512
021d85664eeb28441ad8598cbd80e43930daa1448f00a105da159cca698a1b02c75c1088e947911275102027b778ba4ee1c35014240e84f2dd07284922c17bf1
-
SSDEEP
3072:1BLgaFnPAfFsm487jyjFGuOaKzO28kXRZaswLVilaIdubtP1p:vLgmMFU87jyjFGzN2fhQ2B1p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e378b12dbff53d2d2171deb0329aefe_virlock_JC.exe
Files
-
3e378b12dbff53d2d2171deb0329aefe_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 190KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE