Static task
static1
Behavioral task
behavioral1
Sample
6e8a3a54d3f193fe8434a2238f5dfb91_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6e8a3a54d3f193fe8434a2238f5dfb91_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
6e8a3a54d3f193fe8434a2238f5dfb91_virlock_JC.exe
-
Size
208KB
-
MD5
6e8a3a54d3f193fe8434a2238f5dfb91
-
SHA1
4fc12d6e00fc681ad6e5bac127408ae376cb13a8
-
SHA256
3b8265816fad6e2f95409cad959b0dc5a5fb0ee46a4308678de6df1432569b1b
-
SHA512
db27f7f3083d04a57e6dabcf29be515ec8e0cc3a48158fd07b35c49c483cd4e5fa78b7b98e5e13bc3ac84f8b4b6b763853ebbf63d874c1707574a005bb4bd2ac
-
SSDEEP
3072:5Gpd9PRBQ5dmx3dtO0cPlDJBF7lzBOw9K7zKv3SzsP1/+lhiE:5oRBQ5d1rPpTF7Dr9K7ub7E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e8a3a54d3f193fe8434a2238f5dfb91_virlock_JC.exe
Files
-
6e8a3a54d3f193fe8434a2238f5dfb91_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE