UnlockTool-2024-03-10-0[.]exe

Resubmissions

14-03-2024 17:21

240314-vw67csaa2s 5

14-03-2024 17:18

240314-vvp7fsca63 5

14-03-2024 17:11

240314-vqqx7abh46 8

Sharing

Copy URL

Twitter E-mail

General

Target

UnlockTool-2024-03-10-0.exe
Size

183.2MB
MD5

357c26781174723f34c71fc271be8121
SHA1

c190c24d1ad3f0761318311b657f18ee4bf37869
SHA256

687ae4e801265328517844403455555a5dc738c3d29d4039aedba233109c921b
SHA512

3dd076a71030b61532bf71459e5a6e68891fce047f20db672ed0e4d5eb67b736e07239f8dffc4fd489023be3a87f898143a16ded885e3efc89767e00b1a30a3e
SSDEEP

3145728:MjXNGC00uNwdnd/TaCJIts2NrZnNhINThmWODUC7fr+XIUuqk6m0xYA:MjXghZwdnd/TSs2Xv0ThmgC7j+XduT6b

Score

1^/10

Malware Config

Signatures

Files

UnlockTool-2024-03-10-0.exe
.exe windows:6 windows x86 arch:x86

Password: unlocktool

c82f04178f2641cbb79895c5bae9ac4d

Code Sign

95:20:61:e1:f6:3f:54:58:dc:1c:84:e8:e0:6e:f3:36:83:39:c3:91:f3:25:87:eb:3d:7d:a4:5a:7a:8c:9d:b9
Certificate

Issuer

CN=unlocktool.net,OU=UnlockTool,O=UnlockTool,C=Ha Noi,1.2.840.113549.1.9.1=#0c18756e6c6f636b746f6f6c2e6e657440676d61696c2e636f6d

Not Before

15-11-2021 05:55

Not After

16-11-2031 05:55

Subject

CN=unlocktool.net,OU=UnlockTool,O=UnlockTool,C=Ha Noi,1.2.840.113549.1.9.1=#0c18756e6c6f636b746f6f6c2e6e657440676d61696c2e636f6d

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a7:84:cc:2e:dd:09:06:26:44:0a:c4:90:2d:a9:2c:83:55:2d:d3:7e:03:91:08:64:3f:f9:c7:00:68:89:60:78
Signer

Actual PE Digest

a7:84:cc:2e:dd:09:06:26:44:0a:c4:90:2d:a9:2c:83:55:2d:d3:7e:03:91:08:64:3f:f9:c7:00:68:89:60:78

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeEndPeriod

oleacc

LresultFromObject

wininet

InternetCloseHandle

winspool.drv

EnumPortsW

comdlg32

FindTextW

comctl32

ImageList_GetImageInfo

shell32

DragQueryFileW

user32

DdeSetUserHandle

version

GetFileVersionInfoSizeW

oleaut32

SafeArrayPutElement

netapi32

NetWkstaGetInfo

msvcrt

strncmp

advapi32

RegSetValueExW

xmllite

CreateXmlReader

kernel32

GetVersion
GetVersionExW

wsock32

htons

ole32

CreateDataAdviseHolder

gdi32

AddFontMemResourceEx

Sections

uUSVw$-h
Size: - Virtual size: 18.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Ox!>n&aR
Size: - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Gl=^k1a!
Size: - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

r%!kF_Ia
Size: - Virtual size: 809KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

s")r:1I2
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

T5G?L^!9
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9#O,AxDI
Size: - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DC%D*q^P
Size: - Virtual size: 368B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

\pzvry06
Size: - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

,iF'czG#
Size: - Virtual size: 214.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

`<h=ff#"
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Ng&UC&o'
Size: 182.7MB - Virtual size: 182.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

T=4-mW%r
Size: 413KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: unlocktool

c82f04178f2641cbb79895c5bae9ac4d

Code Sign

95:20:61:e1:f6:3f:54:58:dc:1c:84:e8:e0:6e:f3:36:83:39:c3:91:f3:25:87:eb:3d:7d:a4:5a:7a:8c:9d:b9Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

a7:84:cc:2e:dd:09:06:26:44:0a:c4:90:2d:a9:2c:83:55:2d:d3:7e:03:91:08:64:3f:f9:c7:00:68:89:60:78Signer

Headers

DLL Characteristics

File Characteristics

Imports

winmm

oleacc

wininet

winspool.drv

comdlg32

comctl32

shell32

user32

version

oleaut32

netapi32

msvcrt

advapi32

xmllite

kernel32

wsock32

ole32

gdi32

Sections

uUSVw$-h Size: - Virtual size: 18.8MB

Ox!>n&aR Size: - Virtual size: 55KB

Gl=^k1a! Size: - Virtual size: 331KB

r%!kF_Ia Size: - Virtual size: 809KB

s")r:1I2 Size: - Virtual size: 24KB

T5G?L^!9 Size: - Virtual size: 15KB

9#O,AxDI Size: - Virtual size: 110B

DC%D*q^P Size: - Virtual size: 368B

\pzvry06 Size: - Virtual size: 93B

,iF'czG# Size: - Virtual size: 214.9MB

`<h=ff#" Size: 1024B - Virtual size: 540B

Ng&UC&o' Size: 182.7MB - Virtual size: 182.7MB

T=4-mW%r Size: 413KB - Virtual size: 412KB

95:20:61:e1:f6:3f:54:58:dc:1c:84:e8:e0:6e:f3:36:83:39:c3:91:f3:25:87:eb:3d:7d:a4:5a:7a:8c:9d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

a7:84:cc:2e:dd:09:06:26:44:0a:c4:90:2d:a9:2c:83:55:2d:d3:7e:03:91:08:64:3f:f9:c7:00:68:89:60:78
Signer

uUSVw$-h
Size: - Virtual size: 18.8MB

Ox!>n&aR
Size: - Virtual size: 55KB

Gl=^k1a!
Size: - Virtual size: 331KB

r%!kF_Ia
Size: - Virtual size: 809KB

s")r:1I2
Size: - Virtual size: 24KB

T5G?L^!9
Size: - Virtual size: 15KB

9#O,AxDI
Size: - Virtual size: 110B

DC%D*q^P
Size: - Virtual size: 368B

\pzvry06
Size: - Virtual size: 93B

,iF'czG#
Size: - Virtual size: 214.9MB

`<h=ff#"
Size: 1024B - Virtual size: 540B

Ng&UC&o'
Size: 182.7MB - Virtual size: 182.7MB

T=4-mW%r
Size: 413KB - Virtual size: 412KB