Static task
static1
Behavioral task
behavioral1
Sample
79acca79feafea418afcb98cb8a61cbe_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
79acca79feafea418afcb98cb8a61cbe_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
79acca79feafea418afcb98cb8a61cbe_virlock_JC.exe
-
Size
311KB
-
MD5
79acca79feafea418afcb98cb8a61cbe
-
SHA1
dddf7e40cdf154efa6953f274daddb6feb8307fb
-
SHA256
2eceafe21fbdd78a654e69a6e4b65eea8d40e2ea455d27f21629f4a008bb3c70
-
SHA512
b5f9a8e6c0d67946d71096af003ec6f60eae65f3103f5db1feb1f163232ef3ff87af9f8465a26dc27ce0836c20bbf61629f8e5d53b1a3be22614591a849774e9
-
SSDEEP
6144:Zt6EVUHBMcWcTn73AWxqAuGcl3Grk6MxHMbJklZu7kX8WGbtf83:Zt0HKcWcTn8WxqErk6qSkakh6U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79acca79feafea418afcb98cb8a61cbe_virlock_JC.exe
Files
-
79acca79feafea418afcb98cb8a61cbe_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 310KB - Virtual size: 309KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE