WinLocker[.]exe | Triage

Sharing

General

Target

WinLocker.exe
Size

51KB
MD5

ef11087c3d5a51ee2a163673e0a2d945
SHA1

76437300dea9d4ec25661cd4acaeb8b7142c996f
SHA256

4dfb739b797ba68c266eaa5802404790f32a41155c7cf1559fd4b7174dd55471
SHA512

621f98c8f3e89250967f5742bd4e15a1d76ca30c141ae771f713d998f7181b3069f6cfcd685a84a27fa5cd89e26f4c54c4281f275e89de8f6cd2ae0fccd28725
SSDEEP

384:U6hgbJPtMyYRRUfZOI7ELTjjDCENXyu3bWCrWPWlR+ehoAi6gs:U1iBRKKdNXyurWiWPWlR+Or+s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WinLocker.exe

Files

WinLocker.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ