Behavioral task
behavioral1
Sample
LockDir 7.0.0.95 Multilingual[PeskTop.com]/Readme.txt
Resource
win7-20240221-es
Behavioral task
behavioral2
Sample
LockDir 7.0.0.95 Multilingual[PeskTop.com]/lockdir.exe
Resource
win7-20231129-es
General
-
Target
LockDir 7.0.0.95 Multilingual[PeskTop.com].rar
-
Size
1.5MB
-
MD5
ba929d8162d7f45df90a2a945bb6c039
-
SHA1
28964467c12aed59e7d5c138d7e1a8d78a37c151
-
SHA256
f2a8e9e8bd4ef6f048550259a5f0f8246fa13e0160a670e34b002503dfa16b71
-
SHA512
c1e8192cc93312d95e2599216d893e7dfa916c555a7308b2c4fb6357b5cc666502b5839770397bbf5d46deb0dc6c396b46e0f8f702a691a9a3b8883633239683
-
SSDEEP
24576:2Vz26XIqBadjismU51m0Gi+rmxALCDr14km1xXIwr/LGWGSPHxEN+VeepTzyr2R2:2JPPBadjeUzm0GUmGaYwr/aW1zVrpTeH
Malware Config
Signatures
-
resource yara_rule static1/unpack001/LockDir 7.0.0.95 Multilingual[PeskTop.com]/lockdir.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/LockDir 7.0.0.95 Multilingual[PeskTop.com]/lockdir.exe
Files
-
LockDir 7.0.0.95 Multilingual[PeskTop.com].rar.rar
-
LockDir 7.0.0.95 Multilingual[PeskTop.com]/Readme.txt
-
LockDir 7.0.0.95 Multilingual[PeskTop.com]/lockdir.exe.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 861KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uz1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Visit www.pesktop.com.url.url