8c3d122e57eecc377c6e295d3a01e75c_virlock_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c3d122e57eecc377c6e295d3a01e75c_virlock_JC.exe
Size

1.9MB
MD5

8c3d122e57eecc377c6e295d3a01e75c
SHA1

15fd11c033ad75e1b395c0713babcbf297627b28
SHA256

9d053c8f85a427efa727d7920b8ef1dcf0ee28186bf4e5f44e46c1474f190f6f
SHA512

715e81c0aa03b2dc9f25e3981a8777a871e5de8e674a2e79bbb79302d8eebb18a07297ecda13411f35c69a96dfc700b0a2f9b8d719e3cf405e3373b345ef8fb5
SSDEEP

24576:8bA0xJhU8tuUkWjH9HP0mHNQrcEXYxQUbMjnMWiym4tKeCX7+g5tC88tVq:QxgA9HPK+OMWu77888P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c3d122e57eecc377c6e295d3a01e75c_virlock_JC.exe

Files

8c3d122e57eecc377c6e295d3a01e75c_virlock_JC.exe
.exe windows x86

9714eb5cb2f4fef819ef64a3de58920e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
VirtualAlloc

user32

GetInputState

Sections

.text
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE