��$#젭y�� @�O���$᙭�0P�oԮ3�峏:���2�R��9��leŇ�x}�d�/i�U�))����.%rp�y+,�y s 1y�f�����5��C���� ��������U�,�(�D�G�jzw[�ia%����"�ib��4�~ZU:0�3��QQ֔瘋��TKy�q�x��o/�r��г���'C�Fc�e5��Y�u�m,�v_1�\�$�k������J|Y�s?�!�?����mL>}r����!U$�,�g?V�jZy����4�L�S���Q,���\*�!�4z��$�O��������2~^/D�!,}����#<�����D��زL�����L�D�r�G8���OD]���d��,6z/U�F�n�ł�������G9���]�ϋ�z���? ٠�9����qt�HQs�Nz���ť�oQ�Sl}�CF�:B�4�?�\V[���w� cK~�\-uBk����g��X�4������L;���]@e=ě���}��0��>ݮg������{s���d��M�j w�T�\� �s�m���[Rٴy�`�,��]A�=+��������-f�vgk�W���)O3���)�=t�Z�fc��R6"< B2��p����dy�����I�͂q26qX�����u��^�M�z�P��S=M����7~D�EdXA�:j=�ʈ���M\\�e�F�v� �ڿ�A�s�����v��_}H;�W������o��} �2l��%��SLZ���Uk��4$�B�O�u�� �jI�;X(NN����"��n�%L,Iِ��e�w�'�X�d��KV;K�Վ��\�M�,�Vm�[�Qao2w ~���f���S>��O6�<~O�4Z��r��TⳖj�D�������n���I>�'1)>��|��}۬�W�Fb�n�, �~�n���M-��@3��Ƶ772O��b^(N� O&��HFU�#٪�A�77�BE���_����yŴ��!�����l*�2�K�a#��3�1�#��F7#� V$�2���x�0��,��� Ю��ڎ��q�����l �:��p�Ʋ?��ߦ=M�;�z�KO��{-��n�i����ƖP��Ͱ�?ͽ�3R���R�!+��V�����7�� Oma������0����`ݝsS��� ��;*�c��]G����,��',.���&��Q�"H�Z5����j��:�J?S�!�C��Gr���t�����F�)EV�0T�\.�R�cZY�W�a۔�l�]���"Y�)�Y�k-;��S�l�0;IPSq6SV��%�7�Iu�UMS`vxپ���$W�~�PbGC�����y�?('Y�"~�+���y� ����M�����d��z�:9|��D�);�d˰Y|���W��������3i*KN�缈��T��i?�Ό����ո����)��K����������lw1ֵ7�W�LRR�����Q$� S>�MB��9t`� r����P�k|��".�����[��b�]_�Ǻ��3�eĕ[him�lv�2eû�L�i��B�����pP��<�8僷�B�����U���y���I�˓��I�h�����7<���d��1�\��\���3_:�d#~��W�.L���r�������;ځ�7bpW+mܬ��-�)��4!��(5>L:�k��[�04D�,�m������ư=�k��X��X�KPS��FB4���w*���Cx4�`���g��A$}�$P���Auxk{�A���m�p-�����Jv�2������bz�z<�_i�FfԄ�0�7W'_��!��I��K��7���m�!���3�@O���fx�)G�>αG����PeH�������ei^��o�,��V!"�.=�-a�u�܄�����)>�)イ!K�:�v)�h��ˡ!8��:vS#�XгK��$rJ��|�Y~�)��@�@ ?��͏�̦����)'�==����I#]�`aE��DL��l��,kJ��fo�ȟ�RE�9�-��f.�Dx@$�&i���=�˰͐FՉ��n��Cr o7����~?��@��[�y�Ԇ��S���z�B�� �}_?�}��qѪV�&�t��$�N��U`G>�+A����L�j��3{|��o�"���F&Ln���%@$'�Uq�b7�X�5���'����Ӥ��_i�T�Kv�������m�������ʸ�O<�)�>��!2ExZ�8sN���=�l#�A��F���� �v�ɣr� �(X6w�2�Y�w�F,pǐcCe�<t�`�R$��^�a�56��:�|`d.�o�n�U������.*3^x�����.�ӣ�X���JI%M�L�X Y�O{2�Yg��g��p�o��W�Җ����a��v�%���a}�C���&��ɒ��"φ/�ْb�>�9a���&] 1��eÛ!a��g���%O8{�x���߯�����)}� 1��b�O�G&(d?��Ab��N�2D��h�]��\Bx�1}�ʹ�w{��ܞ���W��mzG:_lE�LB���T<ĮV�B�cO����(f!�C�f��e�������ԡ��3ëߊM���_��h�.�1d�Oz�k��R��%����8R��!4�ϒ�s�c7�kU~�X�|���P�~}�H��l.ڍCC$�k��f�e�3�|��o}{��`��y65�ƯX��-���7�K'�0 �se N��H�<�g��-�ۉW��u��fF�k��F�����g�c�_i�R��Փp8B}��7b��N�������C�a��UJ4�ܲsMe��7�iP Pe�N���}�� ���u�~7��(��D�1��ҷ�������R���<Hx�ګ�J�I�6�5�?~c$E�q ���BY>$H�)�u�~�J��@��p|~�H%��D0��X�U� ��<��eS��*�R���?��o�����*�t�l�V�}�ߋ�ԟO*��<8��Գ][�&�R#��0�^Pvry��W��p�,���v��G��^�t6u��g�ȏ�sG������m�'"bAh�2���4��JE�0X��:�XE���]7���ؗ�Z��Q���P�
Static task
static1
Behavioral task
behavioral1
Sample
LockOn_KeyGen.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
LockOn_KeyGen.exe
Resource
win10v2004-20231025-en
General
-
Target
LockOn_KeyGen.exe
-
Size
919KB
-
MD5
86b5ba5ae9f507c45409b52103a757fe
-
SHA1
6e08b1104b4ac003ae722da0b05528f826b5fd29
-
SHA256
3a28920eac633f3ee5f3fe4725c607f9365bb4c868e5555bfd2b98effc9511f7
-
SHA512
b58b38cd61005ba0bebf55c91baa3373112710ec98f3f69cc2dd40bafa345d4abe285473246ba5fd53338bbeed9a90c8e08ef87a4434f04ca2341b6fd174e644
-
SSDEEP
24576:GPo+LalFGRGEEKyJR11K2ww7pwC57O/2AX:GPPalF9cw76OQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource LockOn_KeyGen.exe
Files
-
LockOn_KeyGen.exe.exe windows:4 windows x86
dec84f631b7f57745b857f0ad4d2fa4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDeviceCaps
user32
GetWindowRect
kernel32
LockResource
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
comctl32
InitCommonControls
ole32
CoTaskMemAlloc
oleaut32
OleLoadPicture
Exports
Exports
Sections
.text Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TVM0 Size: - Virtual size: 781KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TVM1 Size: 912KB - Virtual size: 911KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE