Static task
static1
Behavioral task
behavioral1
Sample
lockfile.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
lockfile.exe
Resource
win10v2004-20221111-en
General
-
Target
lockfile.exe
-
Size
307KB
-
MD5
5e69e2fbab2d86bc50d4a2cdbecb592a
-
SHA1
0a0552886140ad2bff9af154bd0401aaadc7e77b
-
SHA256
74c51d3bd36bbb826880aca41a560727765c1406dceaca30522b0766d95cd27a
-
SHA512
2f3ba111791c5679a80420918b7a7c872d6e7036b45e6ad036044e3e51e5b4e39609cafb96205f3b7ae8b6bd3c31baf0ec32b171c48a5be622ef22b10fb2c778
-
SSDEEP
6144:L93d7XXyae3WRFLHrVZxbvVxDKB7z6rqscLLcmv9Hjoe8nb:LXmmLLTx7GdzsYv9HjoFb
Malware Config
Signatures
Files
-
lockfile.exe.exe windows x64
960cc3b459a0e26f574d39202a746b3b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
user32
ExitWindowsEx
EnumWindows
IsIconic
ShowWindow
SetForegroundWindow
GetLastActivePopup
IsWindowVisible
GetWindowThreadProcessId
MessageBoxA
MessageBoxW
advapi32
RegEnumKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
comctl32
ord17
kernel32
LCMapStringA
SetStdHandle
WriteConsoleA
GetStringTypeA
HeapReAlloc
QueryPerformanceCounter
GetStringTypeW
GetLocaleInfoA
CompareStringA
CompareStringW
SetEndOfFile
InitializeCriticalSectionAndSpinCount
GetMailslotInfo
CreateFileW
SetFilePointer
GetLastError
WriteFile
ReadFile
GetProcAddress
LoadLibraryA
GetUserDefaultLCID
CloseHandle
CreateFileA
CreateDirectoryA
GetLongPathNameW
ExitProcess
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
WideCharToMultiByte
MultiByteToWideChar
AreFileApisANSI
FindFirstFileW
GetShortPathNameA
GetModuleFileNameA
GetShortPathNameW
GetModuleFileNameW
GetWindowsDirectoryA
GetLongPathNameA
GetEnvironmentVariableA
GetTempPathA
GetWindowsDirectoryW
GetEnvironmentVariableW
GetTempPathW
GetTempFileNameA
GetFullPathNameW
GetFullPathNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetConsoleOutputCP
DuplicateHandle
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
SetEnvironmentVariableA
SearchPathA
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetCurrentProcessId
Sleep
GetProcessHeap
CreateThread
CreateMailslotA
GetCommandLineW
CreateSemaphoreA
SizeofResource
LockResource
LoadResource
FindResourceA
GetTickCount
AllocConsole
GetModuleHandleA
CreateProcessW
SetCurrentDirectoryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
RtlPcToFileHeader
RtlUnwindEx
GetSystemTimeAsFileTime
CreateDirectoryW
RemoveDirectoryW
HeapAlloc
HeapFree
WriteConsoleW
GetFileType
GetStdHandle
DebugBreak
GetCommandLineA
GetStartupInfoA
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSize
GetModuleHandleW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DeleteCriticalSection
SetHandleCount
HeapSetInformation
HeapCreate
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
LoadLibraryW
SetEnvironmentVariableW
GetTimeZoneInformation
GetFileAttributesW
Sections
.text Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ