DataLock-Cleaned[.]exe | Triage

Resubmissions

04/12/2022, 00:58

221204-bbzf8sge3v 1

04/12/2022, 00:57

221204-ba5xmagd41 1

Sharing

Copy URL Twitter E-mail

General

Target

DataLock-Cleaned.exe
Size

20KB
MD5

84ad8dc247033bb2a7275a1b7cf77e9d
SHA1

80a42ac95c948898a16822a5e2d050fdf509db2c
SHA256

aeb4b9190b3fe178eda36f12017ab0708dd5181eca223e3729718613d82fbe4c
SHA512

0488a5a3932c4c416748655d603f793519e08e760a4fb72d25ea6bfc3f131371a1628790ffe7587cf6ab4a22e7f5710b68db20dd20a78455816e3a5f1bc30048
SSDEEP

384:B/+wbNr0cqZukvwKwq6uh7fUTcwKOHIl0yyMj8j5FQE/R:MwbRTcwpHkgm2

Score

N/A

Malware Config

Signatures

Files

DataLock-Cleaned.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ