Static task
static1
Behavioral task
behavioral1
Sample
9e1fb242e1abfba47b7a5c7f2859e20c_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9e1fb242e1abfba47b7a5c7f2859e20c_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
9e1fb242e1abfba47b7a5c7f2859e20c_virlock_JC.exe
-
Size
300KB
-
MD5
9e1fb242e1abfba47b7a5c7f2859e20c
-
SHA1
e8246a558b84ebcd5f219728a4f0aee8e001153c
-
SHA256
98a982625ac61f3b966cd551b0108d520bdde6c726f4f27626c1743e7b164342
-
SHA512
a5bd62892db58fb22d41daa5400be3dfc1a52a8c72a41a703b9e3fc0124bfbf370b31d90517d6fdff319b836de4c3800a606580f51ff61422635d34d7e20dc20
-
SSDEEP
6144:jmlBQdd1rPpTFS6KXLC4QvTyaJFvlP1jgTS:jmbIPxFSpCVj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e1fb242e1abfba47b7a5c7f2859e20c_virlock_JC.exe
Files
-
9e1fb242e1abfba47b7a5c7f2859e20c_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE