Static task
static1
Behavioral task
behavioral1
Sample
8839d5aa38a799ffd3f99fc18ffad145_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8839d5aa38a799ffd3f99fc18ffad145_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
8839d5aa38a799ffd3f99fc18ffad145_virlock_JC.exe
-
Size
227KB
-
MD5
8839d5aa38a799ffd3f99fc18ffad145
-
SHA1
002d6e4e850df650acd681f2f46f5059e2091420
-
SHA256
e36d5aba16a552c147d01e90a955aa633e2824a073ebe76447b1784bc0d2028c
-
SHA512
3d7a3ead54629feae6b218814137783110d07d94e00ba18f5b477d098ca65a4c8bae0e32130b703a9e15ce64fd7b84300eebc77ce24fab826d557ae764e9ca0f
-
SSDEEP
3072:bjYUULF0+84T1kzyLBwQ4jzMc3mnVi8kvLICZsxF1cD+cP5VyZaGyL25:fYUc+n4BGYk3t2V7kv3sxFtcPLyYGok
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8839d5aa38a799ffd3f99fc18ffad145_virlock_JC.exe
Files
-
8839d5aa38a799ffd3f99fc18ffad145_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 226KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE