9fff8bbcdb3d094aa89237459b0b21ac_virlock_JC[.]exe | Triage

Sharing

General

Target

9fff8bbcdb3d094aa89237459b0b21ac_virlock_JC.exe
Size

2.1MB
MD5

9fff8bbcdb3d094aa89237459b0b21ac
SHA1

db02b6d40304b8077e3f4f963fd9473b14b46b68
SHA256

fd23643f725efa35dbfbd5fcee5f2bf1dd0755cfca3aefb1d7e3cfaca4f25acc
SHA512

85ee01deb3a49c1db15dfc4ce05024df992724a418720a443d1c28099ef7009764c73b7a351aa32ab8626a53639df47852377b21682e4b306eac893edcb2242e
SSDEEP

24576:eaFpkn3Qp0m9Ir91xguoXF19USZ1hnrKiX+s1c0lIQeXNpNxdQFY42E2Go77bkBE:eav5im98TGLF1trvfIQHSpk8l5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fff8bbcdb3d094aa89237459b0b21ac_virlock_JC.exe

Files

9fff8bbcdb3d094aa89237459b0b21ac_virlock_JC.exe
.exe windows x86

133578c68f31eaa6dc4a92026a155155

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
VirtualAlloc

user32

GetFocus

Sections

.text
Size: 792KB - Virtual size: 792KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE