Static task
static1
Behavioral task
behavioral1
Sample
a2023813558b14c098a98e435247562b_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a2023813558b14c098a98e435247562b_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
a2023813558b14c098a98e435247562b_virlock_JC.exe
-
Size
194KB
-
MD5
a2023813558b14c098a98e435247562b
-
SHA1
03fd653d1b4deae132eea90b0e6b7d2ae53ce5af
-
SHA256
a27d07f5f5042753bcb5950a89cbdf59b0eb7b3bb5d03d56856c87fc8701f578
-
SHA512
3611eb0ff92a01369108648bbdf4b41b4b49794bd7bc5f39b01e400682f0fe7fe55f802fc3f5e2226af6e64e188a5a41f606dd02928f583cc118633a26611174
-
SSDEEP
1536:s/f8HsBl4gezhLhIvuQRtw6roIQeheuEw9IBQB/ayD3jixc+c2gXcsSo5vUxHzCb:S8+cPX0TguEFeZDTiIXc7oGTCoV16X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2023813558b14c098a98e435247562b_virlock_JC.exe
Files
-
a2023813558b14c098a98e435247562b_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE