Static task
static1
Behavioral task
behavioral1
Sample
4b56457de0791f038a857a006b11d6e5_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4b56457de0791f038a857a006b11d6e5_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
4b56457de0791f038a857a006b11d6e5_virlock_JC.exe
-
Size
317KB
-
MD5
4b56457de0791f038a857a006b11d6e5
-
SHA1
578a581f2800c1b28e924ea01e1fbd3c5c7e9d87
-
SHA256
eabf58aa886ba2acc840abe41d640ce3e984c73747b114341308b0ffe47bd047
-
SHA512
203b7db2352c535df26fedea30ca4417f7fce9cc6c7d60396e27f475739a8c5ed5bd0420fc77710759f3de29f739439025c45d9451da87ed970162743d22c302
-
SSDEEP
6144:j6MmnhSCuyZt5wFGBt7GWjcrFZegc9O5jr56xhR549GMUwelxEpIKm1fl:uMmn3cATjcegPX5MH54elxqIKm1fl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b56457de0791f038a857a006b11d6e5_virlock_JC.exe
Files
-
4b56457de0791f038a857a006b11d6e5_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 312KB - Virtual size: 311KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE