AsuxuiHAuiiua
Static task
static1
Behavioral task
behavioral1
Sample
Unlock_3.8_Tool.exe
Resource
win7-20240611-en
General
-
Target
Unlock_3.8_Tool.exe
-
Size
536KB
-
MD5
5b82319aeb78cbc7e5f9be496e1c527a
-
SHA1
3204f93991736ea8a6ae6e5e6606e1f0902d3ee5
-
SHA256
2a5dae540e4d3a1d87020d1bb6ed618f1913818106420ecd5df8332703a32868
-
SHA512
a987817da37ed4984f5fdc7ad14b1cb3f6794469d0ab032b3b42be5bfd30783f139d5f54a7279303297eacbd27bfd126518cd61634c9b81d7450ed2c95200bb1
-
SSDEEP
12288:+CwWdrdpcyvN5gpqmNwnvOcWRMDi26ge5f:+CwW9cyVJD2cWRw655
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Unlock_3.8_Tool.exe
Files
-
Unlock_3.8_Tool.exe.exe windows:6 windows x86 arch:x86
4d71c6568cd912923f8bc2058a57f65f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetPixel
user32
GetDC
DestroyWindow
ReleaseDC
advapi32
GetNumberOfEventLogRecords
DeleteAce
kernel32
WriteConsoleW
GetProcessHeap
CreateFileW
HeapSize
CloseHandle
WaitForSingleObject
CreateThread
VirtualAlloc
GetConsoleWindow
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
QueryPerformanceCounter
EncodePointer
DecodePointer
LCMapStringEx
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
SetStdHandle
RaiseException
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
HeapAlloc
HeapFree
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEndOfFile
Exports
Exports
Sections
.text Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 302KB - Virtual size: 306KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bSs Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ