Static task
static1
Behavioral task
behavioral1
Sample
4bbc496738a1a8e95b5b905e1c7e5e26_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4bbc496738a1a8e95b5b905e1c7e5e26_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
4bbc496738a1a8e95b5b905e1c7e5e26_virlock_JC.exe
-
Size
197KB
-
MD5
4bbc496738a1a8e95b5b905e1c7e5e26
-
SHA1
51295e2e4a70bc5ab5aeccd4c49e2380fcc66ff1
-
SHA256
1920ee47df51b289c82baa8bb593db30fb9c094b8a9993bc28cb2ea47e3495d0
-
SHA512
397eb39c31ee58f4a378d2d65f07f29d3c536f473a4fd091db845a28ef88eed4dd068d0a598bf01b03911883ea0e3b130011b1a4656e3e31843e783b4ad009ad
-
SSDEEP
3072:N0v6uMCie+3dluOTKiyabfPdIR+q0IgM6KUJgwiwVhxT:whMCibKiyOPK+qVgM6KUHzTT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bbc496738a1a8e95b5b905e1c7e5e26_virlock_JC.exe
Files
-
4bbc496738a1a8e95b5b905e1c7e5e26_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE