Static task
static1
Behavioral task
behavioral1
Sample
4eb79347160ff28d13c8d77f73e6bf59_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4eb79347160ff28d13c8d77f73e6bf59_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
4eb79347160ff28d13c8d77f73e6bf59_virlock_JC.exe
-
Size
224KB
-
MD5
4eb79347160ff28d13c8d77f73e6bf59
-
SHA1
c04a88968ce169b204823306841f6a6b9cd40342
-
SHA256
f8e7d0de2e9c2a813b7bc1e64e4cb2cef8c46ac5a71d4f9f459bbee9c70e5d65
-
SHA512
c7aaa1ab6bf29d16727776ccde47f7a3cfde5346ad8be6a38f0ed9bf5a5bd7cb0229d50207397765a4c818d23b8860798df0807c6a6a98e226af49a32cb67924
-
SSDEEP
3072:Yald9PmBQuydmx3dtO0cPlDJBFobIu7sr7aE1Ncno97FP:YomBQXd1rPpTFoz7sr7vjwoX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4eb79347160ff28d13c8d77f73e6bf59_virlock_JC.exe
Files
-
4eb79347160ff28d13c8d77f73e6bf59_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 210KB - Virtual size: 209KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE