Static task
static1
Behavioral task
behavioral1
Sample
96e56e4ff97b4c895c75886b05243c68_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
96e56e4ff97b4c895c75886b05243c68_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
96e56e4ff97b4c895c75886b05243c68_virlock_JC.exe
-
Size
846KB
-
MD5
96e56e4ff97b4c895c75886b05243c68
-
SHA1
65d705d6768d400c7284a4c6010cee7e6dcde10d
-
SHA256
704f5ade5d4aa1a415d05ca3dba7968751ce0b122a457c5f383a881f3fbc98ce
-
SHA512
20148cbf1c606274833b6b278233756428f8c7a2158239788e3d938f009089a5b5d289141da339cba97852dc337e2c628cc876ffe24a00c4a5845d1d0ec5379c
-
SSDEEP
12288:e9ATO8WhV6OWiG0NX5CYRXZtXt9aD4VVdDdbtR3g0Hot1X6VEccJ:e9AY7gopAcrJdbtR3YX6VEc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96e56e4ff97b4c895c75886b05243c68_virlock_JC.exe
Files
-
96e56e4ff97b4c895c75886b05243c68_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 845KB - Virtual size: 844KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE