Static task
static1
Behavioral task
behavioral1
Sample
29b3babd109b4e3a85d609ff2a5e0b08_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
29b3babd109b4e3a85d609ff2a5e0b08_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
29b3babd109b4e3a85d609ff2a5e0b08_virlock_JC.exe
-
Size
196KB
-
MD5
29b3babd109b4e3a85d609ff2a5e0b08
-
SHA1
3a05c7d770a7e6c654a006af94006632061e11d2
-
SHA256
efe0536d08279b0ab1e930e39990e8028903461e3732eea15a6618150013c1fe
-
SHA512
cb77857b9313bfb7b720a85c751915720d6617435a60c2ebf3aa6ff50fb6753bebc387e356ef6bc0f1b258451ede4d6bd2cf26695cbd8023193b72561365f3f9
-
SSDEEP
1536:9FuhhCaxHncanzsQjmAv1IF/gSIzqY+7Bo865zeerhrY1ft/iEKwZIaM/BOkAEsk:uAaxHcaA+mI0IIeejJ30QnbQWzdxazt5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29b3babd109b4e3a85d609ff2a5e0b08_virlock_JC.exe
Files
-
29b3babd109b4e3a85d609ff2a5e0b08_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE