UnlockTool-2024-09-13-0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

UnlockTool-2024-09-13-0.exe
Size

182.3MB
MD5

5a42b084db834b89c61420c92dced682
SHA1

34912eef6100dad889292625845e12de164f61c3
SHA256

70330f5cb057f02a6264a3db13bf1464077af04ba46d492b19d8c53f5431ac13
SHA512

4c99a2ee3d7d9e5a34b18e6ae47612dff92a1a63f14967d2041f25c4f75b6aa55d907e0cc454c53b3906a463ebd9f8c9f41dced606f2ff0d9dabd8cfe0bb70e7
SSDEEP

3145728:0nbPLELupdllFM5G92bk1HFwoItInpS3QIUMom6jlQv3qS5GnZs9x+qL:UPLELupdllIW2bk5eftInYQh7ZjTSTcU

Score

1^/10

Malware Config

Signatures

Files

UnlockTool-2024-09-13-0.exe
.exe windows:6 windows x86 arch:x86

26e1bfc0b51eaf36a913723e2d85ea18

Code Sign

95:20:61:e1:f6:3f:54:58:dc:1c:84:e8:e0:6e:f3:36:83:39:c3:91:f3:25:87:eb:3d:7d:a4:5a:7a:8c:9d:b9
Certificate

Issuer

CN=unlocktool.net,OU=UnlockTool,O=UnlockTool,C=Ha Noi,1.2.840.113549.1.9.1=#0c18756e6c6f636b746f6f6c2e6e657440676d61696c2e636f6d

Not Before

15/11/2021, 05:55

Not After

16/11/2031, 05:55

Subject

CN=unlocktool.net,OU=UnlockTool,O=UnlockTool,C=Ha Noi,1.2.840.113549.1.9.1=#0c18756e6c6f636b746f6f6c2e6e657440676d61696c2e636f6d

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:22:0b:3c:91:88:b2:b1:e8:dc:c3:57:c6:72:ca:7d:5b:69:fa:d6:56:f9:8c:42:3e:d4:55:0e:a6:f9:61:65
Signer

Actual PE Digest

3d:22:0b:3c:91:88:b2:b1:e8:dc:c3:57:c6:72:ca:7d:5b:69:fa:d6:56:f9:8c:42:3e:d4:55:0e:a6:f9:61:65

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

dbghelp

ImageRvaToVa

version

GetFileVersionInfoSizeW

user32

DdeSetUserHandle

oleaut32

SafeArrayPutElement

advapi32

RegSetValueExW

msvcrt

strncmp

netapi32

NetWkstaGetInfo

kernel32

GetVersion
GetVersionExW

wsock32

htons

gdi32

AddFontMemResourceEx

winmm

timeEndPeriod

oleacc

LresultFromObject

wininet

InternetCloseHandle

winspool.drv

EnumPortsW

comdlg32

FindTextW

comctl32

ImageList_GetImageInfo

shell32

DragQueryFileW

xmllite

CreateXmlReader

ole32

CreateDataAdviseHolder

Sections

z-VdgW\?
Size: - Virtual size: 19.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

u?[@Gtz=
Size: - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_4!-ou]%
Size: - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

>+oo_8XR
Size: - Virtual size: 815KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dVo`H?DB
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

=D6OTE=O
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2K`A.W)I
Size: - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

=/x'$6)6
Size: - Virtual size: 368B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sMewj,;j
Size: - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

`YTZ7'dD
Size: - Virtual size: 198.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

dC$xKNjw
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nro0_3uw
Size: 181.9MB - Virtual size: 181.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

^ON#U1z!
Size: 413KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26e1bfc0b51eaf36a913723e2d85ea18

Code Sign

95:20:61:e1:f6:3f:54:58:dc:1c:84:e8:e0:6e:f3:36:83:39:c3:91:f3:25:87:eb:3d:7d:a4:5a:7a:8c:9d:b9Certificate

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89Certificate

Extended Key Usages

Key Usages

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3fCertificate

Extended Key Usages

Key Usages

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68Certificate

Extended Key Usages

Key Usages

3d:22:0b:3c:91:88:b2:b1:e8:dc:c3:57:c6:72:ca:7d:5b:69:fa:d6:56:f9:8c:42:3e:d4:55:0e:a6:f9:61:65Signer

Headers

DLL Characteristics

File Characteristics

Imports

dbghelp

version

user32

oleaut32

advapi32

msvcrt

netapi32

kernel32

wsock32

gdi32

winmm

oleacc

wininet

winspool.drv

comdlg32

comctl32

shell32

xmllite

ole32

Sections

z-VdgW\? Size: - Virtual size: 19.4MB

u?[@Gtz= Size: - Virtual size: 109KB

_4!-ou]% Size: - Virtual size: 356KB

>+oo_8XR Size: - Virtual size: 815KB

dVo`H?DB Size: - Virtual size: 24KB

=D6OTE=O Size: - Virtual size: 15KB

2K`A.W)I Size: - Virtual size: 110B

=/x'$6)6 Size: - Virtual size: 368B

sMewj,;j Size: - Virtual size: 93B

`YTZ7'dD Size: - Virtual size: 198.9MB

dC$xKNjw Size: 1024B - Virtual size: 548B

nro0_3uw Size: 181.9MB - Virtual size: 181.9MB

^ON#U1z! Size: 413KB - Virtual size: 412KB

95:20:61:e1:f6:3f:54:58:dc:1c:84:e8:e0:6e:f3:36:83:39:c3:91:f3:25:87:eb:3d:7d:a4:5a:7a:8c:9d:b9
Certificate

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

3d:22:0b:3c:91:88:b2:b1:e8:dc:c3:57:c6:72:ca:7d:5b:69:fa:d6:56:f9:8c:42:3e:d4:55:0e:a6:f9:61:65
Signer

z-VdgW\?
Size: - Virtual size: 19.4MB

u?[@Gtz=
Size: - Virtual size: 109KB

_4!-ou]%
Size: - Virtual size: 356KB

>+oo_8XR
Size: - Virtual size: 815KB

dVo`H?DB
Size: - Virtual size: 24KB

=D6OTE=O
Size: - Virtual size: 15KB

2K`A.W)I
Size: - Virtual size: 110B

=/x'$6)6
Size: - Virtual size: 368B

sMewj,;j
Size: - Virtual size: 93B

`YTZ7'dD
Size: - Virtual size: 198.9MB

dC$xKNjw
Size: 1024B - Virtual size: 548B

nro0_3uw
Size: 181.9MB - Virtual size: 181.9MB

^ON#U1z!
Size: 413KB - Virtual size: 412KB