Static task
static1
Behavioral task
behavioral1
Sample
9e59a7b0603598d57ed5abd345d0cd30_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9e59a7b0603598d57ed5abd345d0cd30_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
9e59a7b0603598d57ed5abd345d0cd30_virlock_JC.exe
-
Size
284KB
-
MD5
9e59a7b0603598d57ed5abd345d0cd30
-
SHA1
b07b6c6178aa06ad561b35fc2ecee51db171c95e
-
SHA256
51b8c8bbd929c2bc91fb6dcfee64dcd57d098d9aab1fb1fed96716f034e7d3a3
-
SHA512
298b185657d91646d613dfbc21bffab1d8876b87448bca3e291a58ffc1a294a3629fae8122a50d3d3b5bc13b9e51ef35e0456c08b6150f9c9547334e998c977a
-
SSDEEP
6144:ZFR6C61ZHFC1/l9ip7pVM4+uak+ZgGyZs2B1d8+6xGK73VD:ZFR6C6CTIXMZuaPgGy9Ld8d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e59a7b0603598d57ed5abd345d0cd30_virlock_JC.exe
Files
-
9e59a7b0603598d57ed5abd345d0cd30_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE