Unlock_Tool_1[.]2[.]exe | Triage

Sharing

General

Target

Unlock_Tool_1.2.exe
Size

392KB
MD5

737ff738fef9aa060554c69baf94010b
SHA1

6320238ed8ee589ab80fdbf64a9f03a285631e60
SHA256

8bcdb32e024db0917b54e7390172a45be693d52bc5c8bff8d7ba1dce2d2ff4b1
SHA512

8f64f4bd82447a7d27b4b3603bf6221b0156ac115ba04faa08025b18d10cfa3377f8c733414f902526d83dbc7b125c8e90c9aa92b9be6a9168e55e8d7ae8e440
SSDEEP

6144:Zyk+6IpOjjZIhr4rXHiqVz9W4Bn5hDRkoX4RbpUCwiNuu/IQMYHBi:Zyk+rCSryHiA/hDZIRtA8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Unlock_Tool_1.2.exe

Files

Unlock_Tool_1.2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\rje\tg\ud\obj\Release\ojc.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 390KB - Virtual size: 389KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ