2023-05-27_50a8d2d0311dea014c368ef04ca8ce2c_locky | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2023-05-27_50a8d2d0311dea014c368ef04ca8ce2c_locky
Size

308KB
MD5

50a8d2d0311dea014c368ef04ca8ce2c
SHA1

2088f5648471ecf4c1122dcea699e82185d97a01
SHA256

447adee8bb71bb95fd8589f7c4b38163b01e1167162c3bfdbbcde147d626b00d
SHA512

93ac123302fb58ef9047f939f350e997f8168991245ec30565830c1a8c7a48483b0ba866fb2e31b19ac1d5d390790a01eed26fab56910d7071c401e311e422de
SSDEEP

1536:cQUcBDDHCiCR1+VpGG7tF5dFbxQRao1aW7SgokCWvpMfCAj88S:i23HPc1EIEtF5HlQjr7fonwpMffoB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-05-27_50a8d2d0311dea014c368ef04ca8ce2c_locky

Files

2023-05-27_50a8d2d0311dea014c368ef04ca8ce2c_locky
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ