Static task
static1
Behavioral task
behavioral1
Sample
58542aed828c114de61e05ca56295687_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
58542aed828c114de61e05ca56295687_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
58542aed828c114de61e05ca56295687_virlock_JC.exe
-
Size
536KB
-
MD5
58542aed828c114de61e05ca56295687
-
SHA1
b18ba13947ae4a189de3b286a2b66b1e1e92e613
-
SHA256
176084dc963bf5fd1fee13ee73a22a91edf6c435711e013d13ab666d40e142a0
-
SHA512
abe18daf01c59135a3451099ea861ced040da86f1d3823c9ef4fcac866850d654162a3f22d337fe6b011c778a8a99db388f93c628be3cbdf27230a7705b909fc
-
SSDEEP
6144:RpthZ9OfgYwZO1SAejIQI6554UR7RKdDcbi+CS5JtgUjk6806HxzYvPYS:rt96gySnIQFn4UHKR6TCYtpxnY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58542aed828c114de61e05ca56295687_virlock_JC.exe
Files
-
58542aed828c114de61e05ca56295687_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 535KB - Virtual size: 534KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE