teunlock[.]zip | Triage™

resource
unpack001/tEunlock.exe

teunlock.zip

SHA256 bf7d769e928cfc7892700a4de0b10a4f9f63daad72599fe3911f1e02c6349960
MD5 a40d7fc9539eabe1dba8d8a2b14aaa0f
SHA1 879ad104cc0ab4b0542b9a5ea45a3895226c5c32
SHA512 2fbe9ceb0c980b739fc4f01c636df32f8e922967ed5662348f11e360f4a1c290b0b1cd336312000f20d10a409170f5f4995126104df8187204834f595a9f52e2
SSDEEP 384:IPxPV7VCcVIogJHd4+9CHPqqb04hO2rK0UZlR5R+dPZHBAX:sVnVC6sCSU04U2rrU7Rb+FFB8
TLSH
T11482DF52E6350C84CE2AE6B4D656E20DE27DA012DD04A926C91C4764CF2BEE84D7736E
MD5 SHA1 SHA512 SSDEEP TLSH

FILE_ID.DIZ

SHA256 f4530eaed0483283c18df2195a211a175b83490b590d5ca4d26b5061ccc4c3ec
MD5 8df04d0a4d58285bf91edb7089e42549
SHA1 843bcd1a7840c8efa1b6a8cfe3ffaeffacacd204
SHA512 01dae8a0607c761a4750ab07caca4d542c74225c38012ee44e16e0f7f7e54c09d25c381148ad7fde93bc96ebba9ba2257ea6ee1dd9de5f4adf9c0dc65eb5d09a
TLSH
T191E07653DF3060CAF3630A69C5051082B86A289E47B87B8028732322E397B3413382F6
MD5 SHA1 SHA512 TLSH

README.TXT

SHA256 b56bea8a2e064b2a12db5747e48938a86cd5a16474f5539075daca3506561730
MD5 ec259191c396224b946d77ae1adb032a
SHA1 58359c2c49c76ad7229a1b0cc9280c9481814d48
SHA512 eb81084c1b73ff94c4139ca5bf24a3c7a920a9830ccabe86e60ba1016d1a7b6126e2b5550c890e64e8117e8dad17e1c97f3646f82cc292d85def332d8dc7adce
TLSH
T182411B9E0C0AA2702BB0C17774BD46B3E77C211E9675A089F0FF43180BBA9348A9D4D8
MD5 SHA1 SHA512 TLSH

UG2000.NFO

SHA256 6efa59b7358c812633c5cf132213d3d21be3e4347052c11f34cddfdc4220fa41
MD5 10211f4afb5f5453030eab356679e793
SHA1 c36c9d4ce0718ecebce857af6e2ffdf768d90079
SHA512 010f628b8a5ab386f5e79925e1b0b7ea8a5f5b4f340f6c4c7e6b4232c3c92bda08b0a31d6a282b1e12533003cab14f6efbc32fda9b3747184580ab6567a8e5d5
SSDEEP 96:Pc2kqWL0UW/UWM99U+/+SAAGlAEQ0HwEPkT0rRE8z6A0ZAl6n+K+k5ptyYt+H+bs:PcvL0Xk90i99xBmx
TLSH
T13722BDA1FB2231AFA7A28420D5B940257EAD2FCE13350495712FB3F8173B7739729568
MD5 SHA1 SHA512 SSDEEP TLSH

protools.com

SHA256 6530bd0fe371a3f7004ccc282335529bfa12d5088c101b66fcb60192288ad4ce
MD5 4f921cc9af6be593bd69bd1124f13b1c
SHA1 96a25717c1a5b53e6a30406ea8ee516984620cd5
SHA512 2a9f7dd3a11425068d8e2d5d2c5d72f32552a1cf5b4e19bb362793539c355f8c30a2854482b903746f78b409b89db4ce1d19edab6313b0beea0a3844fb3c5d61
TLSH
T1AE21C63A661CE8F48085AA5E8A03BE41BFF3E54BE7C91209425129F7BF32924E4C0412
MD5 SHA1 SHA512 TLSH

src.zip

SHA256 c0cc249b59cf2fcc0fa39c90fe86b7f067c22e0796aae6f1bfe7546d16fbf35d
MD5 fb1eac24e251c0875e80f12d614d1a73
SHA1 24de6a688f3cd93c5245bfa62ba54ab6e4a92704
SHA512 18c523512419c8085475f1e76a0b3fab24e939c9961fbf198fe50296dd4dbfc6269ea487df2adb390055ea8f5f3b01669ec1132ee38595041e3d750c894335d4
SSDEEP 192:+wI6oIaMWWMPV5pVAmCFGIAIoxp8LJHdj5XqAJ9CHS/P0lSMOh0y:EPxPV7VCcVIogJHd4+9CHPy
TLSH
T1DC22BF83F9744884DA3DEBB8D7AA92CDE738F112CD445C66890443848B1AE645CBB36D
MD5 SHA1 SHA512 SSDEEP TLSH

R_MAKE.BAT

SHA256 eaf65b813460ec92eb803208773147081e727c8e0f88f9ba9121301b9a36b402
MD5 539c1ddcd668bca28c46a6a250403432
SHA1 10ea42a1acd4c2852b25890a1779f6cdbd9014c8
SHA512 34e84baf2fbd3a0b2bc01fc7448a757579d18be2a6386bfa3215a2e46cb4df828b141331ad8edc78d06d18c0513e71d53bffd426ed9855e8415b5d4be6c7f770
TLSH
T12BC02B517065CC81B0814C74DD2B2B13D01B70C0970C60000477B1D7088CC214944CC0
MD5 SHA1 SHA512 TLSH

te_unpack.asm

SHA256 393a26ff6cdb445055274023da5d8f7b427496aaf77f46d584d6339ac48cd51c
MD5 41bf7209f21b44f0fb4b1bc76413a759
SHA1 9bde24952adeda9709b4e6286adf9f854b25d063
SHA512 c6328e27cc40de0b21ce967e614f6420d62268f65fed8de743ef7f7622420e0660664caf0d226512f54eb967a62ffe5aeaf5e29fb4c55bab1677e92643bffe14
SSDEEP 384:7KrSPLSHiZAcd/Ekst4W1I7Jp2vADetFt4WoXZjIUN6JA1MupMFWw:7KrSPLSHi+cd/EftB1I7JAvADetjloup
TLSH
T16C82CEA2998216F256F1CE3918B31887E715100B01B05939FB6E87FA2FB61D8D7FC4D9
MD5 SHA1 SHA512 SSDEEP TLSH

teunlock.res

SHA256 f8a41df51c8cb8b98d6ea84dc01d6e685d9cbdbb01732179853144802157c60b
MD5 45ca934832556cf9f58a604492317e2d
SHA1 6ec33589374ea771f52cc15bf5b07ca37b9ccdcb
SHA512 1ce9b77345a821900fcba74678836f9613f3a52502d4666b4c2ae7198ee806d59df3eb1447f949e4180f182ffa66975f978094ffc897662779359655ebb17021
TLSH
T11641D219B39E0B98F09D0A716F6347F41D94FD8C4528411E62B0AF1E2CB8E4739091E4
MD5 SHA1 SHA512 TLSH

un-te.asm

SHA256 05e54e2c22196a21dbeeb8a9e258592fd7f790278a0dc3d77cb9bd146ed27627
MD5 edbd8343996541e07710cd449be499af
SHA1 866d465751f874e27437e4f64bf748438ef96f97
SHA512 605445bbe80d4a3035eb6934fc59f7caffa1fa6fa403299286800ffe3f24a29898d761d00553c66c7158a8ff15f1d69914fa6fad79c4a713dcb740594c3b0c9d
SSDEEP 192:zuuTtuBieABjKIeycm48AhP6xu4Ddj/5FqB710z:zztuIjKIejm48AUu4Dt/dz
TLSH
T1B242B58629A2579264F081B5BFB72447F32030CB66E10B34776D83D51F3B3E8EA9129C
MD5 SHA1 SHA512 SSDEEP TLSH

tEunlock.exe

IMPHASH 8eeb5c3bdaeb6bc661672830f3c30da9
SHA256 c109fcd137f8053e433560d1b4109e442cf54144bae9b2d58135c3146281e0f8
MD5 fc2e000a9e9b5b3a106d0609b40a9b08
SHA1 e1813f9351d9198dd5098626c5b0cac735b9e900
SHA512 3974784e35a6122f422594e6b7e0520c8d7f3e828851e4cd0e2e92e883e41c5833fece89df21ab4b544c38a359ca8f0e9bae6fad61202688901abd3cf6bc01d7
SSDEEP 96:nPRs/2xH+snENHn252hnTPpvX6EE53kEqUtXp4pDp4pdYz:nZs/KH+snENW5sn9RE53Zqw4b4m
TLSH
T19E42B4067BD605B8E04E0A70AE7367B4EDBBFA0D431E861D0BF0695E2C71B8678083D4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

1

Entry point

5891

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

teunlock.zip

FILE_ID.DIZ

README.TXT

UG2000.NFO

protools.com

src.zip

R_MAKE.BAT

te_unpack.asm

teunlock.res

un-te.asm

tEunlock.exe

kernel32

user32

comdlg32

generic

Sharing

General

Malware Config

Signatures

File Explorer

teunlock.zip

FILE_ID.DIZ

README.TXT

UG2000.NFO

protools.com

src.zip

R_MAKE.BAT

te_unpack.asm

teunlock.res

un-te.asm

tEunlock.exe

kernel32

user32

comdlg32

generic