2ad58f2047981baf9b0f5a808488f478_virlock_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ad58f2047981baf9b0f5a808488f478_virlock_JC.exe
Size

714KB
MD5

2ad58f2047981baf9b0f5a808488f478
SHA1

59b72f8b496e3a14251cf925d453696feca07572
SHA256

82f986046891fd55717b62fc7df7311667d6f32731be6e81c65494a5b1921bbe
SHA512

89717f3c2bb9d5bd439d55f7da438c3d8102eb9796bf20fa43656ee8f7e6587ad259c6ae6400ff301baf1a25a968d324cdcfbf2166734032ec9ad4b625822a63
SSDEEP

12288:HHwc4Uf0JQwCaD/Dc9tR+C9nyuaLTfSBd23HJgIigW4WTWHv5eIp395kUVg:nwcmvDD/ctRh6TKi3HJBiZ4v5bNHVg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ad58f2047981baf9b0f5a808488f478_virlock_JC.exe

Files

2ad58f2047981baf9b0f5a808488f478_virlock_JC.exe
.exe windows x86

d452c0374b46d0390f9adbd6e6a6ec9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VarDecMul
SafeArrayCreate
VarDecFromI2

user32

GetMenuCheckMarkDimensions
ChangeDisplaySettingsA

advapi32

GetInformationCodeAuthzPolicyW

ws2_32

WSAStartup

kernel32

Module32NextW
GetThreadLocale

ntdll

CsrFreeCaptureBuffer

Sections

.text
Size: 710KB - Virtual size: 712KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE