Static task
static1
Behavioral task
behavioral1
Sample
5216cef0a9920ab4bf109b9dfb88a734_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5216cef0a9920ab4bf109b9dfb88a734_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
5216cef0a9920ab4bf109b9dfb88a734_virlock_JC.exe
-
Size
236KB
-
MD5
5216cef0a9920ab4bf109b9dfb88a734
-
SHA1
934d7f083a755016fef800e6874c755eae6d5dfe
-
SHA256
cc35c48d56fb4017edf75d02bdf81f175500fd2d7482b2135bc218e2135a2a5c
-
SHA512
fdd966610ec150e31f4a0e7eaf63ccb0a87853322fb29830af3ab0bd0da2eabd8b99145f5274032bc7b430d4896d482630c8d3e6c94bc5c3559c1a3d5217da98
-
SSDEEP
6144:G4dL8PNjxsx+g5xAtyVfT+t3CH2fevy1IzVHmyikHm:G4dL8P9xsx+gMycavoKmyik
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5216cef0a9920ab4bf109b9dfb88a734_virlock_JC.exe
Files
-
5216cef0a9920ab4bf109b9dfb88a734_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 235KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE