Static task
static1
Behavioral task
behavioral1
Sample
d6470f92bdc044357d4257813d085a4e_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
d6470f92bdc044357d4257813d085a4e_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
d6470f92bdc044357d4257813d085a4e_virlock_JC.exe
-
Size
488KB
-
MD5
d6470f92bdc044357d4257813d085a4e
-
SHA1
8a64a562393ed619e57b108cd65754e843e032eb
-
SHA256
20ccf9841801613ec99cad7ff0edc3c65f0f41fdb593a4913ae09fd349d9f227
-
SHA512
332f31e8a2b4ce8495e54eaa8868c52a84cc7b598e62a8a8d20c1ef26fa954e557cd83e9709188464fc59712838eff004b0d4cbc689b3dc84fd71008aab4000e
-
SSDEEP
12288:Civ0PxFWc5yufwL32dbKnVg2SdQ3p7827Qr9L/yOyg:hkWGyufwLTVNSq3W/yOyg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6470f92bdc044357d4257813d085a4e_virlock_JC.exe
Files
-
d6470f92bdc044357d4257813d085a4e_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 484KB - Virtual size: 483KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE