OsLock[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

OsLock.exe
Size

385KB
MD5

029bf7e766da3094d9f9d6c6e808e754
SHA1

8bdef0cee07213460532e2aa6711bc748afe9e7a
SHA256

653a88ab4fc453b75c26a4a59c489cc0b79258522465be376c04eca28e0a89df
SHA512

07f2be609749fd3b02697b91e9ac2709da2ef9caf6115baf321d143c195a8509f200bf0b23282e14e6aa6bf8e19722ee672a19be77045b5e72cc93d8ade5cf2f
SSDEEP

6144:11IE/9VydPc4IvjTZlyZsDDyr3rCUp4NzUCpM69/KImQi/6ebkY:11ilc4IrTZlyGDcj4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OsLock.exe

Files

OsLock.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ