Unlock_Tool_v2.5.3.exe.zip
- SHA256 d9968e713bc0c0236ce95464f670b18fe5f61b218f0360efb3b6c84f1751a80c
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
Unlock_Tool_v2.5.3.exe
Resource
win7-20240903-en
windows7-x64
24 signatures
60 seconds
Behavioral task
behavioral2
Sample
Unlock_Tool_v2.5.3.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
26 signatures
60 seconds
General
- Target Unlock_Tool_v2.5.3.exe.zip
- Size 776KB
- Sample241108-zyqdvazelr
- SHA256 d9968e713bc0c0236ce95464f670b18fe5f61b218f0360efb3b6c84f1751a80c
- MD5 1c205ef0f9090e173774baf6cc16db41
- SHA1 ddcd1dcdad8318174bcdb42bf63e7fd81e9dfb29
- SHA512 004f0bdf5d7678028269eba66ee092f1819802337336b774a500c238778e15d6588b008cc21890c8150347df2f14ed81a2799ba345b9402aced02ae5129e40cc
- SSDEEP 12288:4BThI5spy/QJeBV6QVbIhm6PGVd7I2VsvkHxh2DzarHc1tiLXCYoO0C9K:4BaWy/NBvEE6+DI9/P1t/YoO0C9K
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
Unlock_Tool_v2.5.3.exe.zip.zip 776KB
-
Unlock_Tool_v2.5.3.exe.bin.exe 1014KB
Unlock_Tool_v2.5.3.exe.bin
- IMPHASH 4266bb49f2289307fe65fe63db54fbf6
- SHA256 47f4e44456ec5a1e8cd427c76bfbe12285ecf5e4e6b0d0e20114527c5948f1cd
- MD5 f42bf5672f267e2c91ab15cf5e62a65b
- SHA1 91a7fe6ae7b7d65f1d5fd0331e5a5114e00774ba
- SHA512 2f76684191aa3e186db40d30a606cb0118995e80014ed5f2a2551b9e09ecf82d560fdf7837f5216ae5b51c062b7668dab7770562dd932aee9c4dd879ffdf014a
- SSDEEP 12288:A4tEnhbou8tI4N1dM16AO9pRL/y7NEoGYW7p9nOmeymPOtanSX3XxPWxQ1MFMHwF:BtBDay3Gho1fkdQT6mdb9eEnuvr7v
- MD5 SHA1 SHA512 SSDEEP
Password
infected
PE Signature issue
Digest
11:88:62:04:74:b2:0a:4f:f0:15:62:c6:a4:b8:f7:0a:c5:75:0d:db:ed:43:ab:8d:b1:9c:3c:0a:4d:9e:0a:b8
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Privacy Technologies OU,O=Privacy Technologies OU,ST=Harjumaa,C=EE
Chains
Sep 30, 2024
CN=Privacy Technologies OU,O=Privacy Technologies OU,ST=Harjumaa,C=EE
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Privacy Technologies OU,O=Privacy Technologies OU,ST=Harjumaa,C=EE
Serial Number
d0:46:1b:52:9f:67:18:9d:43:74:4e:9c:ef:e1:72:ae
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 31, 2023 - Aug 30, 2026
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
649520
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
user32
AddClipboardFormatListener
kernel32
CloseHandle
CompareStringW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
RtlUnwind
SetEndOfFile
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WideCharToMultiByte
WriteConsoleW
WriteFile
Name
.text
Size
693KB
Virtual Size
692KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.00cfg
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idc
Size
274KB
Virtual Size
274KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE