Static task
static1
Behavioral task
behavioral1
Sample
f8f0a7962e5d02b83a9163f57ad1984b_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f8f0a7962e5d02b83a9163f57ad1984b_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
f8f0a7962e5d02b83a9163f57ad1984b_virlock_JC.exe
-
Size
188KB
-
MD5
f8f0a7962e5d02b83a9163f57ad1984b
-
SHA1
2bfd51c93b79ba6d458b4423d4fcf5368993a0e5
-
SHA256
4974ec30bdffdc67b40bab2603195b0d402190c593d28a4fe1a466ee389da247
-
SHA512
6ebc13685a0099e28327c219fa4d201a44a5d247ef128f6e802a5e815e9cc4aac7fd35e4783b5844787b43d490cb21cb0838f7108e2dd92c76c97efaaed68ba3
-
SSDEEP
3072:oGid9P3qBQidmx3dtO0cPlyBFcSw18zIY78/:ov3qBQid1rP8FcQzIY7C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8f0a7962e5d02b83a9163f57ad1984b_virlock_JC.exe
Files
-
f8f0a7962e5d02b83a9163f57ad1984b_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE