Static task
static1
Behavioral task
behavioral1
Sample
48f8d09df05e6ad27470a50c59204c86_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
48f8d09df05e6ad27470a50c59204c86_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
48f8d09df05e6ad27470a50c59204c86_virlock_JC.exe
-
Size
190KB
-
MD5
48f8d09df05e6ad27470a50c59204c86
-
SHA1
b1bb9437d62bcdae6b2cd2aa76396bec5eedf3ad
-
SHA256
d0508391c55f50d5314ef375e0412036a735435581f25b129b293d7682847ba9
-
SHA512
28f64d5f2132f27dfe5185f7bcfc3e91663b26d37c4cf8c4d3c178d342813586b26a8e8cba20f3d1aec390bfef92bb35aeb1cc83cb9b2c607b67c31236f7872e
-
SSDEEP
3072:homufN8+BY3bZNdm2wPcNBMNpja2W88XSWwJk6+PZVawrBoZWIoUlqr1pODPaoft:hFuoiPj3XHWwJkRVawaWFUc1pSamA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48f8d09df05e6ad27470a50c59204c86_virlock_JC.exe
Files
-
48f8d09df05e6ad27470a50c59204c86_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 189KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE