Static task
static1
Behavioral task
behavioral1
Sample
7646ed637065a7415eb9b565b235c08f_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
7646ed637065a7415eb9b565b235c08f_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
7646ed637065a7415eb9b565b235c08f_virlock_JC.exe
-
Size
515KB
-
MD5
7646ed637065a7415eb9b565b235c08f
-
SHA1
5a92067b2fb320961683eb4f2df21af9dfb34b3f
-
SHA256
f1b5a287be27b87e7855285dd301fc58fd49e4cb54081780a1cb6fdb5be0a454
-
SHA512
5cd9377855ce9e633db04020ef6b3dd5cbc0ff8d211d01e662a171a209215688f2c1c72882b028f6d8045a3a3d2ccf41e1b5101b0e92249763ead6078fbe42be
-
SSDEEP
12288:RS9ZhTXmMjrrOInzQ2Jg4Y01jnbYr/v/8Ijrccli+vrh:09ZhTXmM/rOIzQyg4PbYr/v/8IjBh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7646ed637065a7415eb9b565b235c08f_virlock_JC.exe
Files
-
7646ed637065a7415eb9b565b235c08f_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 514KB - Virtual size: 514KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE