Static task
static1
Behavioral task
behavioral1
Sample
fe2f4d4922b69feccf4c63bc6fc1c491_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
fe2f4d4922b69feccf4c63bc6fc1c491_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
fe2f4d4922b69feccf4c63bc6fc1c491_virlock_JC.exe
-
Size
252KB
-
MD5
fe2f4d4922b69feccf4c63bc6fc1c491
-
SHA1
9bfd09fb4c6657843b3f0bd60313467362ec5e61
-
SHA256
f76a5093d4ffa4018ef7cec5ce0f06abac0ce2e088c007eaa06b1e7165c39178
-
SHA512
7bd6dcb427137d5bf93256bfe9f46fef79db71218904151fd108a15bb48d094eebfc9051d00ecd17334829d851de2306688ab32b54b83e354b528c57bc88de5d
-
SSDEEP
6144:a6aBMNGNs9udbI7fNVEXUJwUt5LMz4WU+HA5vNa3G3Da17tlYFIAVh:a6KyGNsVt5LMzPU+H4a3G321HSVh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe2f4d4922b69feccf4c63bc6fc1c491_virlock_JC.exe
Files
-
fe2f4d4922b69feccf4c63bc6fc1c491_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 251KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE