Static task
static1
Behavioral task
behavioral1
Sample
2023-05-27_97bb4c4fa22f022397dd66a7e93a66ac_locky.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2023-05-27_97bb4c4fa22f022397dd66a7e93a66ac_locky.exe
Resource
win10v2004-20230220-en
General
-
Target
2023-05-27_97bb4c4fa22f022397dd66a7e93a66ac_locky
-
Size
288KB
-
MD5
97bb4c4fa22f022397dd66a7e93a66ac
-
SHA1
758d1e0c460615167b964dfeea0bcc9bea473fa8
-
SHA256
3a79920dccd7f29ae3ecfbfa0b61c7245c3649da7dbff2072f0ff809adbdb33b
-
SHA512
0a5740ef82b3fbefaaf81bd65925d1ba327de3943fd9ec807553ec8890e561c0c6142d3707652c481d3335cb2980539db10ac8145eea1f339466327f1d99bf53
-
SSDEEP
1536:cQUcBDDHCiCR1+VpGG7tF5dFbxQRao1aW7SgokKWvpMfUwJj88S:i23HPc1EIEtF5HlQjr7fo/wpMfDJoB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-05-27_97bb4c4fa22f022397dd66a7e93a66ac_locky
Files
-
2023-05-27_97bb4c4fa22f022397dd66a7e93a66ac_locky.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ