Static task
static1
Behavioral task
behavioral1
Sample
f1bff056bc005fdb6e74f4f995892bb1_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f1bff056bc005fdb6e74f4f995892bb1_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
f1bff056bc005fdb6e74f4f995892bb1_virlock_JC.exe
-
Size
197KB
-
MD5
f1bff056bc005fdb6e74f4f995892bb1
-
SHA1
f4ac051e125d65c5d14b11d670c1edf32986df66
-
SHA256
3b8dc621ffb52f575cd74d2a70b29b33d352c93a4bfa87d8bb23705cdc22a0b4
-
SHA512
8b9e231e40b566fb8a355b8b8830b9629ba7296cfef89adcd684cd878cdd946e3bd7d70ff59d90120cdd8521eb6fa9428df628467f16fb4d680ef14c6b36ceac
-
SSDEEP
3072:xwSmLoGcnnFraMnLqYJZvzFeEAQKH3oKIodNtp3WKg+jmVPRQY+bj6NpNr5O8daj:xwilubI0hYmY+b/VgF37FS6yH9YTJC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1bff056bc005fdb6e74f4f995892bb1_virlock_JC.exe
Files
-
f1bff056bc005fdb6e74f4f995892bb1_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 197KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE