UnlockTool-2024-04-27-0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

UnlockTool-2024-04-27-0.exe
Size

189.1MB
MD5

3847983af775b017d6bb7bca66d7ca92
SHA1

fd017f90694a8abadb166e95283241495b167320
SHA256

4dfb3948b4a7099ae3dd7b75a20cd95e942765f251e6493d35fb2e812b8c908e
SHA512

0041d2c8ab547ac98cbdcc2621d1c170cc03191397f10927c5ec7a2f64e792b80d29f8e1c2de3cb84f1fe12290529e25d5a9cc1e329dc21ca41ec3f01261e796
SSDEEP

3145728:ku5HWtZd6nOaZV6nNhZtCmvdvIGAqjlozk1mnj1PlFMvJYy/pX0oLoTH:ku5HWt1AsnFtFvi+oggjKhYy/pvLQ

Score

1^/10

Malware Config

Signatures

Files

UnlockTool-2024-04-27-0.exe
.exe windows:6 windows x86 arch:x86

26e1bfc0b51eaf36a913723e2d85ea18

Code Sign

95:20:61:e1:f6:3f:54:58:dc:1c:84:e8:e0:6e:f3:36:83:39:c3:91:f3:25:87:eb:3d:7d:a4:5a:7a:8c:9d:b9
Certificate

Issuer

CN=unlocktool.net,OU=UnlockTool,O=UnlockTool,C=Ha Noi,1.2.840.113549.1.9.1=#0c18756e6c6f636b746f6f6c2e6e657440676d61696c2e636f6d

Not Before

15/11/2021, 05:55

Not After

16/11/2031, 05:55

Subject

CN=unlocktool.net,OU=UnlockTool,O=UnlockTool,C=Ha Noi,1.2.840.113549.1.9.1=#0c18756e6c6f636b746f6f6c2e6e657440676d61696c2e636f6d

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d7:20:28:07:48:b8:5f:f0:a1:e4:a0:0e:c2:74:ba:90:68:88:c0:09:57:f6:9e:b7:9e:17:16:5a:e3:7f:32:c0
Signer

Actual PE Digest

d7:20:28:07:48:b8:5f:f0:a1:e4:a0:0e:c2:74:ba:90:68:88:c0:09:57:f6:9e:b7:9e:17:16:5a:e3:7f:32:c0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

dbghelp

ImageRvaToVa

version

GetFileVersionInfoSizeW

user32

DdeSetUserHandle

oleaut32

SafeArrayPutElement

advapi32

RegSetValueExW

msvcrt

strncmp

netapi32

NetWkstaGetInfo

kernel32

GetVersion
GetVersionExW

wsock32

htons

gdi32

AddFontMemResourceEx

winmm

timeEndPeriod

oleacc

LresultFromObject

wininet

InternetCloseHandle

winspool.drv

EnumPortsW

comdlg32

FindTextW

comctl32

ImageList_GetImageInfo

shell32

DragQueryFileW

xmllite

CreateXmlReader

ole32

CreateDataAdviseHolder

Sections

b`C5F"6C
Size: - Virtual size: 19.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

9p,+FdWG
Size: - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CrcjzBOc
Size: - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0,9q$FjU
Size: - Virtual size: 815KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4QCAc^'>
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

J9#BHQjJ
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

-UCSfb&0
Size: - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

wNpvenoY
Size: - Virtual size: 368B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

;0@O/M'n
Size: - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

V_6Fop&;
Size: - Virtual size: 221.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

hb'eO9gh
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

!Ut*&vjP
Size: 188.7MB - Virtual size: 188.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

4'+J\fT5
Size: 413KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26e1bfc0b51eaf36a913723e2d85ea18

Code Sign

95:20:61:e1:f6:3f:54:58:dc:1c:84:e8:e0:6e:f3:36:83:39:c3:91:f3:25:87:eb:3d:7d:a4:5a:7a:8c:9d:b9Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

d7:20:28:07:48:b8:5f:f0:a1:e4:a0:0e:c2:74:ba:90:68:88:c0:09:57:f6:9e:b7:9e:17:16:5a:e3:7f:32:c0Signer

Headers

DLL Characteristics

File Characteristics

Imports

dbghelp

version

user32

oleaut32

advapi32

msvcrt

netapi32

kernel32

wsock32

gdi32

winmm

oleacc

wininet

winspool.drv

comdlg32

comctl32

shell32

xmllite

ole32

Sections

b`C5F"6C Size: - Virtual size: 19.4MB

9p,+FdWG Size: - Virtual size: 115KB

CrcjzBOc Size: - Virtual size: 349KB

0,9q$FjU Size: - Virtual size: 815KB

4QCAc^'> Size: - Virtual size: 24KB

J9#BHQjJ Size: - Virtual size: 15KB

-UCSfb&0 Size: - Virtual size: 110B

wNpvenoY Size: - Virtual size: 368B

;0@O/M'n Size: - Virtual size: 93B

V_6Fop&; Size: - Virtual size: 221.5MB

hb'eO9gh Size: 1024B - Virtual size: 548B

!Ut*&vjP Size: 188.7MB - Virtual size: 188.7MB

4'+J\fT5 Size: 413KB - Virtual size: 412KB

95:20:61:e1:f6:3f:54:58:dc:1c:84:e8:e0:6e:f3:36:83:39:c3:91:f3:25:87:eb:3d:7d:a4:5a:7a:8c:9d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

d7:20:28:07:48:b8:5f:f0:a1:e4:a0:0e:c2:74:ba:90:68:88:c0:09:57:f6:9e:b7:9e:17:16:5a:e3:7f:32:c0
Signer

b`C5F"6C
Size: - Virtual size: 19.4MB

9p,+FdWG
Size: - Virtual size: 115KB

CrcjzBOc
Size: - Virtual size: 349KB

0,9q$FjU
Size: - Virtual size: 815KB

4QCAc^'>
Size: - Virtual size: 24KB

J9#BHQjJ
Size: - Virtual size: 15KB

-UCSfb&0
Size: - Virtual size: 110B

wNpvenoY
Size: - Virtual size: 368B

;0@O/M'n
Size: - Virtual size: 93B

V_6Fop&;
Size: - Virtual size: 221.5MB

hb'eO9gh
Size: 1024B - Virtual size: 548B

!Ut*&vjP
Size: 188.7MB - Virtual size: 188.7MB

4'+J\fT5
Size: 413KB - Virtual size: 412KB