Static task
static1
Behavioral task
behavioral1
Sample
2ed78513544e610760be4621ca3b0dc9_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2ed78513544e610760be4621ca3b0dc9_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
2ed78513544e610760be4621ca3b0dc9_virlock_JC.exe
-
Size
188KB
-
MD5
2ed78513544e610760be4621ca3b0dc9
-
SHA1
419231353265c4da6bb5b2d8dc12844d0902b9d1
-
SHA256
714428b6b9a892b2cde1737ace4909dd37a41eb58cd9ba93ef2c401d5b427bb5
-
SHA512
e98b89a702dc0b67865625d940f7d6ec610d551665e76c773cbbec37a908c2da5bdf3486be409e66036db061bddc16f8a92dd750448b1a4727077bd6a3db204c
-
SSDEEP
3072:Ko4Nhh1aCEA0FWlffcBj28FNuWZCwrZytmmKiSK8f7jQbJule+Sq/DiR:+hnaCSF0f5ezZyNK5l/IElQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ed78513544e610760be4621ca3b0dc9_virlock_JC.exe
Files
-
2ed78513544e610760be4621ca3b0dc9_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE