45359f6e158e0c812d439b86058bf2bd_virlock_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45359f6e158e0c812d439b86058bf2bd_virlock_JC.exe
Size

2.2MB
MD5

45359f6e158e0c812d439b86058bf2bd
SHA1

1f8b8fed2cd8ef3ea6bfbdb622e168f4ca967ed7
SHA256

f2f6d405711d44d4ca9ed6d6c844b07ce0611d51b8a19d1fad2ba823bfb40818
SHA512

127ad3e9420941e6a95e828431915272191dfa19769c0303e09dd1adc447b8d7a393f3763573c56dadc4fbf517657b50d3be807e70886b9a3090fc2890889cc4
SSDEEP

24576:NUe2/y7bzreoR3vliMVHRlHJvg3EktZzkpimGf0EpHaVzzplf+TNeY8sF5sHqlzu:N1pCGxlpvgLzzR0tVzOBk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45359f6e158e0c812d439b86058bf2bd_virlock_JC.exe

Files

45359f6e158e0c812d439b86058bf2bd_virlock_JC.exe
.exe windows x86

b398aba4c079eda4e6b9d5770e227dcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCommandLineW

user32

GetClipboardSequenceNumber

Sections

.text
Size: 896KB - Virtual size: 896KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE