Static task
static1
Behavioral task
behavioral1
Sample
6d90c7eea5e80f78051261cf864d9d90_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6d90c7eea5e80f78051261cf864d9d90_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
6d90c7eea5e80f78051261cf864d9d90_virlock_JC.exe
-
Size
262KB
-
MD5
6d90c7eea5e80f78051261cf864d9d90
-
SHA1
e946a8b7667c791d510b5ef1a8ff24c45e914eb4
-
SHA256
b221bf86b950948c0ca74227cd75c135787617f259b54676c15c0bfc45218cc3
-
SHA512
4174e30ee1ea3f76a9ffa8e8dd2951d32838defc6f16c387359b9b1cf873369fa450ba47d2f5f639f5879e71aa8c504e2999ae9be89c268bb82df83f165da750
-
SSDEEP
3072:08Xw2ydRxHfIgZKHXV/nUH/J9UjoWCprTQkubirCnUqTJXHCYzKJNSu3u1neDQy:XghxNZaXc9uG2RTJ3CYzK3SHtek
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d90c7eea5e80f78051261cf864d9d90_virlock_JC.exe
Files
-
6d90c7eea5e80f78051261cf864d9d90_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 261KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE