Static task
static1
Behavioral task
behavioral1
Sample
536024e909534298b6d1b5503dc09335_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
536024e909534298b6d1b5503dc09335_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
536024e909534298b6d1b5503dc09335_virlock_JC.exe
-
Size
200KB
-
MD5
536024e909534298b6d1b5503dc09335
-
SHA1
479f85c7020235eb6dc35a8cf73ccb4aa1c97f04
-
SHA256
934b42da5c840fa20a365a114ac5665a8d8375fdcad7d3298f93732da2d58e5d
-
SHA512
87e7bc12058c9e129c2244375c6e37c750999f66d7d4b09dbae57a28991ffad6fdb8fef9e7903a0d0357fd5926808754cabfead8a2fff53a63e4cba4dcecf1fd
-
SSDEEP
6144:bCZFu2+vUVyurg9BX+RuYKDFmK3uGXorTyyYbBdX:bCZAzDFXMrTyyy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 536024e909534298b6d1b5503dc09335_virlock_JC.exe
Files
-
536024e909534298b6d1b5503dc09335_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 199KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE