Static task
static1
Behavioral task
behavioral1
Sample
6b5bb7a356c05deac08c0b995d127c76_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6b5bb7a356c05deac08c0b995d127c76_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
6b5bb7a356c05deac08c0b995d127c76_virlock_JC.exe
-
Size
250KB
-
MD5
6b5bb7a356c05deac08c0b995d127c76
-
SHA1
9c23381fcb4df7fdd39b69ca8b9ce4d166fe46f8
-
SHA256
3fe7ca535c9d1ad6f171bafdbf916f2c79ccb75cfa72f3cb52a7c60845764b41
-
SHA512
d3eb6d8b77d48756519f975d19e14b6abf631d6bd72217397f4a41ab192c5f5e44f65dad23ef935141e0674090cac1c3aadd6ee031e2bfa622351cb1b92051a0
-
SSDEEP
3072:FyzXqs/fsTTTT9wg3J6FRzRXGYDUd8wxhKIQCv3bz169RuBS3JdCa4yimv32IjLf:FyzH/jxEZW/9iQA/6RNKuRIzzpcm/GB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b5bb7a356c05deac08c0b995d127c76_virlock_JC.exe
Files
-
6b5bb7a356c05deac08c0b995d127c76_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 249KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE