Static task
static1
Behavioral task
behavioral1
Sample
5e7b55f42e6ee8b19bbcda315891ff79_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5e7b55f42e6ee8b19bbcda315891ff79_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
5e7b55f42e6ee8b19bbcda315891ff79_virlock_JC.exe
-
Size
2.5MB
-
MD5
5e7b55f42e6ee8b19bbcda315891ff79
-
SHA1
55e2add9c81c8de050f30448d1ff5976ac8fa33a
-
SHA256
a6bffcff5188d0058d91e5f2599150a4b4ba58dc8aaab324accb02511650edaf
-
SHA512
d10e24c814ca9199b4d5eb2163d2f9ccbe68ea7a0f5a8fb6fd594631ff4389cfe7bc8c90b77dd00df4ae50edbb22c1b20f6faf8292e4ea71d2f6a55cd70667e6
-
SSDEEP
49152:cN04wGtb48WUFnpUMiMMJMvjMt+EMv6x2JC/W:+pFkU7h6x2A/W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e7b55f42e6ee8b19bbcda315891ff79_virlock_JC.exe
Files
-
5e7b55f42e6ee8b19bbcda315891ff79_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE