Unlocker[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Unlocker.exe
Size

4.5MB
MD5

778cda9591f8d6f07707b65ce05ea370
SHA1

53628db27e8cb8a0ac06c990e05f7c923a0b5598
SHA256

b6480210d261e507103afc0cbf06a4257aaf2ba58b5acaf85533619c845b6a11
SHA512

6a3ac6be950bd35e90dc17b8ffb2415d1afeb15bac9f72e1e6da3a367a899786db9a416141680595cfc12ba5a128445f27f331aed5e2ea10776efc0babe41e3f
SSDEEP

98304:VDXtQxAhVju4AFVg3glS8jt2ufYDKMkcXf/JlHp:x9QijuBVgwlSs2HjnJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Unlocker.exe

Files

Unlocker.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

Cw|wBUx
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

B421E578
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ