Static task
static1
Behavioral task
behavioral1
Sample
505b1470a30ccd32edbc3efc469e4366_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
505b1470a30ccd32edbc3efc469e4366_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
505b1470a30ccd32edbc3efc469e4366_virlock_JC.exe
-
Size
216KB
-
MD5
505b1470a30ccd32edbc3efc469e4366
-
SHA1
343a2b4cc512c58cda948551327ca59aa58ed1e8
-
SHA256
f8a460e4626e89674f59df247852a661335c8e899de54524c7909d4508112162
-
SHA512
f784a63ba32ac7bed2a17ec8028f91b193f017e87514cb8b812f2c023634f0722cfd9d97f402d3bac402dad5fd812cb31ba25f0451881f1e9c4c184d65409bbd
-
SSDEEP
3072:D2KxBTILQ2PnkZxc39mmbBml0/vbPTu32PbEo7WDFZppzRcSt9+JwbYjH:a0TILFk5puy32P7ERBRX9+JwO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 505b1470a30ccd32edbc3efc469e4366_virlock_JC.exe
Files
-
505b1470a30ccd32edbc3efc469e4366_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 211KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE