Static task
static1
Behavioral task
behavioral1
Sample
Winlocker builder by Amp v6.1.exe
Resource
win10v2004-20231215-en
General
-
Target
Winlocker builder by Amp v6.1.exe
-
Size
2.3MB
-
MD5
e142b5538058ce6b3a93418fae3ff592
-
SHA1
701f7417e23b45d97d670bb559761f8127642b6c
-
SHA256
e0690e6ba71039e1be5161e7e93ffc7a7882f57a5d38e3f7d4e9a8ffce080f93
-
SHA512
fcaa3e4ecb25026d430121ad918f5fed5a262d6382f10a331ab0bb0e95dcbaa8093e8d6b7e6f1d57cf961f5a3c0100708d968417e7eff663b9b804f435503d28
-
SSDEEP
49152:4Ey1J0CuV2ijBif0/mNp4Ln6we30HqC3o6rjRLgPuCPNvlKcdBHidlujv:4EEJVm2Qsc5Ln6we30H7VRLcumZlKSUU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Winlocker builder by Amp v6.1.exe
Files
-
Winlocker builder by Amp v6.1.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
" pR Size: - Virtual size: 15.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
b:bbb Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�b+b�R Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE