Static task
static1
Behavioral task
behavioral1
Sample
8c978974290de037044368fe6fc7d685_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8c978974290de037044368fe6fc7d685_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
8c978974290de037044368fe6fc7d685_virlock_JC.exe
-
Size
188KB
-
MD5
8c978974290de037044368fe6fc7d685
-
SHA1
47e0f173a083ea34806f83f5e7f8d4d20109cf81
-
SHA256
e764c0b7f05fcf53245ea39650b74cb184f54560a19d0f9a9e7478c031e3955f
-
SHA512
d0492b457c3f65af9a2fb750bc0a70c027207d003ac809fd838afd5a1d775364591d65954a3dea07260b99d95c6d2ebe44384c9e43800c890f11db61cb4fe0bb
-
SSDEEP
3072:PpCsWOnEAJbdjv6FrAtmKsKRsbn1gcCNCJ/pPY68dRDKblsc9ciOQb0lWsQqdOIW:PpRl3BsNKsisWcCNCJ/pPYvjDGic9ciL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c978974290de037044368fe6fc7d685_virlock_JC.exe
Files
-
8c978974290de037044368fe6fc7d685_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE