Behavioral task
behavioral1
Sample
Global Unlocker Setup Wizard 4.6.96.exe
Resource
win11-20240419-en
General
-
Target
Global Unlocker Setup Wizard 4.6.96.exe
-
Size
43.7MB
-
MD5
a49cb17f9cf0a76b201c6b219fd40280
-
SHA1
5c23a1b2878285075e1a41968a27dcc86fac7d3b
-
SHA256
85e2a15decdaebd4d16bf417ad57c608c0f182825ab940102c611f5a4489bfd8
-
SHA512
2859f67a169127af03ce28dcf9d72b416a75f5d2e70ac46eb3dfb4100950c7c599cf8f851dd33aa7ad089a4102f12ff7408033448d3d8f2c872a30165b6abccf
-
SSDEEP
786432:CQH6Je9UpldvXp+N5YwCx0ylxMMPIImXZ03ZxcbiH4AnKGNL3:CQH6Jeutp+N+0/Mg9yebiHl5L3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Global Unlocker Setup Wizard 4.6.96.exe
Files
-
Global Unlocker Setup Wizard 4.6.96.exe.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43.6MB - Virtual size: 43.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE