Static task
static1
Behavioral task
behavioral1
Sample
ded278c7863c9a4ad609f213fe9fab74_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ded278c7863c9a4ad609f213fe9fab74_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
ded278c7863c9a4ad609f213fe9fab74_virlock_JC.exe
-
Size
199KB
-
MD5
ded278c7863c9a4ad609f213fe9fab74
-
SHA1
d4724f6ddcd8c1858db9e8e4af950b6bab99f4ca
-
SHA256
fd7277c9aee2e2303a8184842fff32d93454a7f9b743d4eb492ddc671867f3a1
-
SHA512
94ee7a362d6b89f1254ddcf947fcdafea4afaba5370789bc173fc2bacd9a559cc28295833ce3a6426bc55ef328e35d8ce8823e6761b6c61d28fb3788a4343fad
-
SSDEEP
3072:fQg30JgbTtnQBStTDXvg1KVFA6LR6VtznnAzRMVOsgqL/Ywz:cy9QAtDfg1K/R6VpnMMVOrqL/Ywz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ded278c7863c9a4ad609f213fe9fab74_virlock_JC.exe
Files
-
ded278c7863c9a4ad609f213fe9fab74_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 198KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE