Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2023-09-26_b3897769472d372adb6961146367755e_lock.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.2023-09-26_b3897769472d372adb6961146367755e_lock.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.2023-09-26_b3897769472d372adb6961146367755e_lock.exe
-
Size
304KB
-
MD5
b3897769472d372adb6961146367755e
-
SHA1
0b4fdc350f2d36c79114ade37212af5c4f7d290d
-
SHA256
dc19a0aa504b2d8ff699cf36af550264f1c0e32a71807355702a4d8e6b7b5564
-
SHA512
674d6b6e323bb77e4e7dace6e036f48926d7efdcf031e449f5ef460295de62aac245d3987ffaa4dedcff2e0855e6d0d2063e294b9a8fe1fc7712013d03553e0c
-
SSDEEP
6144:UjjrdCGRdPEeFsrqSO7x+RpApFE/CRfpuhs5/eV9H9yDU+u:MrdC+zf7x+RpApKCRfGNV90w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2023-09-26_b3897769472d372adb6961146367755e_lock.exe
Files
-
NEAS.2023-09-26_b3897769472d372adb6961146367755e_lock.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 299KB - Virtual size: 299KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE