Static task
static1
Behavioral task
behavioral1
Sample
ff22ade2e2a6dcd1c8e0128ccbd96c88_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ff22ade2e2a6dcd1c8e0128ccbd96c88_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
ff22ade2e2a6dcd1c8e0128ccbd96c88_virlock_JC.exe
-
Size
757KB
-
MD5
ff22ade2e2a6dcd1c8e0128ccbd96c88
-
SHA1
cd7181353768d713fa4f90893b135d58c48127c0
-
SHA256
a7202a24e68a4a9ebc5b61ebf08ee256a8b6585e4e222455d42bae033be1e04c
-
SHA512
0e63ee8b3fe08950625259aa268023dd20a42aa34245ccc60a314ae2198cda4bc53ef5c373cb3f9febd629f9b0ae944eb5a7b8e416e874b40f0b042ed63d4bad
-
SSDEEP
12288:nkKY83tpMbfCRW8WtJf9+SQDufBFr/PbL0atAsP2MUGFeW6YNON9blNY:nkKY83tqbB8WtiSYufBFLPdtx1UceumI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff22ade2e2a6dcd1c8e0128ccbd96c88_virlock_JC.exe
Files
-
ff22ade2e2a6dcd1c8e0128ccbd96c88_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 752KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE