Static task
static1
Behavioral task
behavioral1
Sample
fa737c338b74c2c5e001e359cbd81f9b_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
fa737c338b74c2c5e001e359cbd81f9b_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
fa737c338b74c2c5e001e359cbd81f9b_virlock_JC.exe
-
Size
266KB
-
MD5
fa737c338b74c2c5e001e359cbd81f9b
-
SHA1
ad902d355af71c3fa3347aec40a1118fa056ad44
-
SHA256
ac8514dad03f98719730f517fed3341585508003488515aa758c3ac0eadd43a1
-
SHA512
aa3c5a08e2a0069f57a7f032780778a919d1d88c6c40037f745f49e92e125e976a511fe0e9edc4956931038b6291457e2e11d53478e18b64975142cecb5f5a40
-
SSDEEP
3072:8MEhdGEXlqZODGLJcoNwiPgr5ghxM+WPnFDeufdcs8IXkGspQit7WERdDc1S:5EGpos3NwiPgX9islj9ypnDb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa737c338b74c2c5e001e359cbd81f9b_virlock_JC.exe
Files
-
fa737c338b74c2c5e001e359cbd81f9b_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 261KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE