Static task
static1
Behavioral task
behavioral1
Sample
b8779d782fb7af1c66e28e35a24f8a0d_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
b8779d782fb7af1c66e28e35a24f8a0d_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
b8779d782fb7af1c66e28e35a24f8a0d_virlock_JC.exe
-
Size
187KB
-
MD5
b8779d782fb7af1c66e28e35a24f8a0d
-
SHA1
3d9af439d2522a426a8b26c436f4702647e5ef55
-
SHA256
f3d09c093d35dd2f1745108e8392aed6cec78fedc53e175506448ab5a5735c82
-
SHA512
5d5e62f45641c449d51e51681a315034fe5fb527f4d5aebd1c3a7359cf5e34ef3aaaa88e5f3306864395ab1375e26ec0533c502b86784fe1231e14b3b2f4c2d1
-
SSDEEP
3072:MW6p4ZmD/t9d0c2GbMSrKxRil6gXUioIsl43maLEKWkp:MR4QDGc2GbMEqRi1XUhTlumaL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8779d782fb7af1c66e28e35a24f8a0d_virlock_JC.exe
Files
-
b8779d782fb7af1c66e28e35a24f8a0d_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 187KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE