Static task
static1
Behavioral task
behavioral1
Sample
f88ded7a2ba686c417595657cfa75d20_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f88ded7a2ba686c417595657cfa75d20_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
f88ded7a2ba686c417595657cfa75d20_virlock_JC.exe
-
Size
802KB
-
MD5
f88ded7a2ba686c417595657cfa75d20
-
SHA1
26918dda2dda66a0bbc0304ebf64e5bc4433bb1b
-
SHA256
7b2e1357675d11552b1b0afb0d028d370672c14f34787d597524040e24794260
-
SHA512
e07c88dc8c556b36758a49456de08466cfd417bac6512e05e241d8321f48198b43f0787fe94de52b081cd598b4179260828de534e8dfb5bb6577a97580347331
-
SSDEEP
12288:nFGivHB6bNDN0XJk1kWr/ZRF42obSHv4JaAJtlwHmIGQj9c+x6aP/a1Pbc8O4r4M:vPBCTfHAJaHGIlj9dCPbc4s+ji+mGTD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f88ded7a2ba686c417595657cfa75d20_virlock_JC.exe
Files
-
f88ded7a2ba686c417595657cfa75d20_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 801KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE