Static task
static1
Behavioral task
behavioral1
Sample
81cafb6a0b236d5a315a7921591f261c_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
81cafb6a0b236d5a315a7921591f261c_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
81cafb6a0b236d5a315a7921591f261c_virlock_JC.exe
-
Size
242KB
-
MD5
81cafb6a0b236d5a315a7921591f261c
-
SHA1
e4d5e0d693a251c10c18b2b7c043bbb79528e932
-
SHA256
6d3e285ddec51d964da0137a6ec6cd83116754dd6860aa4a718320f9b52c5079
-
SHA512
c6ddd7bf1babae6567ac696c9fca176db019228a184e845063f7bfcfa821ded068337ef88573eca08e292b1b44967b6fe7f7baba2504da8d0bdead53b3278432
-
SSDEEP
6144:YSmvTAn5zd2Qc6gUz1zkyyFKKDBwKxXnIUabGI:YBTeFRg04FoKNJyp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81cafb6a0b236d5a315a7921591f261c_virlock_JC.exe
Files
-
81cafb6a0b236d5a315a7921591f261c_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 237KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE