Static task
static1
Behavioral task
behavioral1
Sample
78e253594aba9e09f7457822ceb90f92_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
78e253594aba9e09f7457822ceb90f92_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
78e253594aba9e09f7457822ceb90f92_virlock_JC.exe
-
Size
692KB
-
MD5
78e253594aba9e09f7457822ceb90f92
-
SHA1
3c115c6ed5e568e78e3c739c4cd0a393ae0c0ff2
-
SHA256
bfdda0a1fc1abbe7da8757c0ba46b13cbe366fce131f64194e7ef93289ed60f5
-
SHA512
dbc68fa088c65636d9c2b1725142dae69212fd168f06fd4ab0e8957d5d1805ae80935b7873d8257085308e22c2e4fa7288466d9c03e5daa81af3c6b18bc412f1
-
SSDEEP
12288:NpmTdHp7KWrMU9UMjNd/ieFcx3c0vEGNWVcU1tf433smIoa4yKmf2DyUUchHbnxP:NpmTdHp7KWrMU9UMjNd/ieGvEGNib1Z1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78e253594aba9e09f7457822ceb90f92_virlock_JC.exe
Files
-
78e253594aba9e09f7457822ceb90f92_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 691KB - Virtual size: 691KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE