2[.]2 Unlock All[.]exe

General

Target
2.2 Unlock All.exe
Size 217KB
Sample240711-a4befa1hpe
SHA256 6b50e77df4ea884657371771bab7c651a02706bbf530667dacd1081d2de75e00
MD5 028e956abe9af1f9bd86a304ddebcb6e
SHA1 4e11db63a754b21e694fb655f916450d4acbe702
SHA512 40a340d7537c065385f2d5aff67d72a81bf706c3589da4ef807f2100b63e49116260406e3079c6e73d38139a3800b224a8bcb5a031ded3016e01f791395f6af6
SSDEEP 6144:dsIpG8xeYcLOzcJoDQ+hGGhL8AOPaxncc:O4eYcLOzzL8Yxnc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2.2 Unlock All.exe

File Explorer

2.2 Unlock All.exe

.exe 217KB

2.2 Unlock All.exe

IMPHASH eb1c843f3ce26e42ba6e22e5e1707e79
SHA256 6b50e77df4ea884657371771bab7c651a02706bbf530667dacd1081d2de75e00
MD5 028e956abe9af1f9bd86a304ddebcb6e
SHA1 4e11db63a754b21e694fb655f916450d4acbe702
SHA512 40a340d7537c065385f2d5aff67d72a81bf706c3589da4ef807f2100b63e49116260406e3079c6e73d38139a3800b224a8bcb5a031ded3016e01f791395f6af6
SSDEEP 6144:dsIpG8xeYcLOzcJoDQ+hGGhL8AOPaxncc:O4eYcLOzzL8Yxnc
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

31604

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\benst\Documents\Dev\C++\2.2\UnlockAll\Release\UnlockAll.pdb

kernel32

WriteProcessMemory SetConsoleTextAttribute SetConsoleTitleA GetStdHandle OpenProcess Sleep GetLastError K32GetModuleBaseNameA K32EnumProcessModules CreateFileW HeapSize GetProcessHeap SetStdHandle WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType CloseHandle WaitForSingleObject GetExitCodeProcess CreateProcessW GetFileAttributesExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW

user32

FindWindowA GetWindowThreadProcessId

Sharing