Static task
static1
Behavioral task
behavioral1
Sample
6be9f2ae00a59eaa14b48813180177c7_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6be9f2ae00a59eaa14b48813180177c7_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
6be9f2ae00a59eaa14b48813180177c7_virlock_JC.exe
-
Size
544KB
-
MD5
6be9f2ae00a59eaa14b48813180177c7
-
SHA1
a35bc5997d71872c505eba62c5cd877fb40a47d9
-
SHA256
1c30ea6278469e3d1dce8b6d66782d57c602f89636c016ae2b747afd08f910a4
-
SHA512
e8bc6b600f29ab4369915af35e10c5cf848059a3df6cc0ef6499fa610826072dc917943bf90068c174b52f81aae8c05a37e70a76c74404e397c8d89b9ebd3161
-
SSDEEP
6144:f3RBQ5d1rPpTFNLry7jt4DREcMZ5vVCiiKrao9afJu3YYtWGaVoRiS6hxH5AgPax:f3PEPxFc+FuvVCiisao9Ii3aViKHyx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6be9f2ae00a59eaa14b48813180177c7_virlock_JC.exe
Files
-
6be9f2ae00a59eaa14b48813180177c7_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 532KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE