2024-09-01_cb857b88f3e2d1770fd84f785491cc8c_lockbit | Triage

Sharing

General

Target

2024-09-01_cb857b88f3e2d1770fd84f785491cc8c_lockbit
Size

146KB
MD5

cb857b88f3e2d1770fd84f785491cc8c
SHA1

8f01c8b334b1c7c1cc9509e07f9a1fc5bd3ccbdb
SHA256

e701518928403acbc237279270a333ae9a987329e3784cfce4e407da052ae3c2
SHA512

b664178b89ee4ea1db2b119a8101b4273b8a0194997b8019c27cba4432cac1c0152b2f2e860821b1cba2b2e80fb3322746ed3b8d937ed6dc0e6a49eb06b62a9b
SSDEEP

3072:xZIuid1XBwSYyC7B/4ZIltOqecMrCciQpYl7Cv+sl:s1XBwSY3htlO9pOA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-01_cb857b88f3e2d1770fd84f785491cc8c_lockbit

Files

2024-09-01_cb857b88f3e2d1770fd84f785491cc8c_lockbit
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ