Static task
static1
Behavioral task
behavioral1
Sample
215d87751c246bd8fe56c8767ff13d48_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
215d87751c246bd8fe56c8767ff13d48_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
215d87751c246bd8fe56c8767ff13d48_virlock_JC.exe
-
Size
266KB
-
MD5
215d87751c246bd8fe56c8767ff13d48
-
SHA1
934275fb326d241d5178ad9bdbddb87c048e7dbd
-
SHA256
9a064ad8d8ca05e7e3a2d0d87dda337e5aeeb3b2a068578281f0d06cf5a26a5d
-
SHA512
1388a338613b8b00db33b4fcbe7d269d9b5e7044052859849c0e954007669018ec2514da1403a9820a5eee6f3460696fbb45b384101e23f18af49be1fed4027a
-
SSDEEP
6144:YRsXY9sxFj4NHS1cGSUWUunj4Zam6kApgd0BUW7zWyyEAI:46xFj4NKbV2njumpgd0GW7zWyz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 215d87751c246bd8fe56c8767ff13d48_virlock_JC.exe
Files
-
215d87751c246bd8fe56c8767ff13d48_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE