Static task
static1
Behavioral task
behavioral1
Sample
2023-08-22_519de67bab0df997e8cd374afacbf25a_virlock_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-22_519de67bab0df997e8cd374afacbf25a_virlock_JC.exe
Resource
win10v2004-20230831-en
General
-
Target
2023-08-22_519de67bab0df997e8cd374afacbf25a_virlock_JC.exe
-
Size
293KB
-
MD5
519de67bab0df997e8cd374afacbf25a
-
SHA1
df3ca92d0c469878774257183ecd4ab39681157e
-
SHA256
ef2bbafcdd42329cf7049913639f4665eb38d8f6f7dcf9a416b4afa242faa56a
-
SHA512
7fdc9ad43a1eb9e044d02dee540e7440516034cdc941eedd0c47094682015bece108cdaf42f13125c97dd96969b8013a004cb2ac611b0752c3d086a4084ef42b
-
SSDEEP
6144:RrSKC5IXoGdKDdw3oJNT81HdXlG9wkS5Z3cbnQpmO:9SKCSoGdKDHq1HIaSQf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-22_519de67bab0df997e8cd374afacbf25a_virlock_JC.exe
Files
-
2023-08-22_519de67bab0df997e8cd374afacbf25a_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE