2024-03-12_96c6b3defee286e8cfeaa55f1f0213c1_nanolocker

Sharing

Copy URL

Twitter E-mail

General

Target

2024-03-12_96c6b3defee286e8cfeaa55f1f0213c1_nanolocker
Size

199KB
MD5

96c6b3defee286e8cfeaa55f1f0213c1
SHA1

5f6540342830d102cb3be1d56b132492cd996e05
SHA256

39b3ea36ee86d8ed519236b8ec2eeaddff04d43b91361c1d818d0f1f9aab93b8
SHA512

7697a0a03f59c2c819bc4e937eb40a789e08ab449cad2a1274cf3336a19820dede67fc9bac830f621d50051274876d745b25c9b9b3010f6898eb72adf69f0c72
SSDEEP

3072:X/WJ2f9zbGu0Z9C1hwDzBhE/NQ80cKITOpel9gX4cvIcVnQBSUMzIg6IIWXhRw04:X/A2fJ02vmeB6N7e9tzGDNbm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-12_96c6b3defee286e8cfeaa55f1f0213c1_nanolocker

Files

2024-03-12_96c6b3defee286e8cfeaa55f1f0213c1_nanolocker
.exe windows:4 windows x86 arch:x86

0fa252cf3b402c97aff621eb0a98936b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptAcquireContextA
AbortSystemShutdownA
CryptDestroyKey
CryptEncrypt
CryptExportKey
CryptGenKey
CryptImportKey
CryptReleaseContext
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
CryptDecrypt

crypt32

CryptStringToBinaryA
CryptBinaryToStringA

gdi32

SelectObject
StretchBlt
SetBkMode
CreateSolidBrush
DeleteDC
CreateCompatibleDC
DeleteObject
SetBkColor

iphlpapi

IcmpCreateFile
IcmpSendEcho
IcmpCloseHandle

kernel32

lstrlenA
CloseHandle
CopyFileA
CreateFileA
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetDateFormatA
GetDriveTypeA
GetFileSize
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetSystemTime
GetTickCount
GlobalAlloc
GlobalFree
GlobalLock
lstrcpyA
HeapAlloc
HeapFree
LoadLibraryA
MultiByteToWideChar
ReadFile
SetEndOfFile
SetFileAttributesA
SetFilePointer
Sleep
SystemTimeToFileTime
WriteFile
lstrcmpA
GlobalUnlock

ole32

CoInitialize

combase

CoUninitialize
CoCreateInstance

shell32

SHGetFolderPathA

user32

UpdateWindow
TranslateMessage
TrackPopupMenu
ShowWindow
wsprintfA
SetFocus
SetClipboardData
SendMessageA
RegisterClassExA
PostQuitMessage
SetWindowTextA
OpenClipboard
MessageBoxA
LoadIconA
LoadCursorA
AppendMenuA
BeginPaint
LoadBitmapA
GetWindowTextA
GetSystemMetrics
GetMessageA
GetFocus
FindWindowA
EndPaint
EmptyClipboard
DispatchMessageA
DestroyWindow
DestroyMenu
DefWindowProcA
CreateWindowExA
CreatePopupMenu
CloseClipboard

ws2_32

inet_addr

Sections

.text
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 174KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.SCY
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0fa252cf3b402c97aff621eb0a98936b

Headers

File Characteristics

Imports

advapi32

crypt32

gdi32

iphlpapi

kernel32

ole32

combase

shell32

user32

ws2_32

Sections

.text Size: 13KB - Virtual size: 16KB

.rdata Size: 3KB - Virtual size: 4KB

.data Size: 5KB - Virtual size: 16KB

.rsrc Size: 174KB - Virtual size: 176KB

.SCY Size: 2KB - Virtual size: 4KB

.text
Size: 13KB - Virtual size: 16KB

.rdata
Size: 3KB - Virtual size: 4KB

.data
Size: 5KB - Virtual size: 16KB

.rsrc
Size: 174KB - Virtual size: 176KB

.SCY
Size: 2KB - Virtual size: 4KB