SeroLocker[.]exe | Triage™

General

Target
SeroLocker.exe
Size 234KB
Sample260823-km58lafn21
SHA256 43344da2c150905e1d24bf7f4a3dfa5fbdaea54fa33b5a2e05ea7db8c209e7c3
MD5 3c38ad63097cbc8b0ff8b235fb688790
SHA1 26efcc38ab220ff1e03c2a3215d9331dea2b58af
SHA512 7d523dfb94a6553743b039733ee08da6296b0a1445e10acbf46585a188aa0903c91ca4698090ceb02cc1389bb2231a01f68015c50578c1e21bf0f6c306f87382
SSDEEP 3072:c+dwo7t7woPnxQst0Q088UOnYqCwW+8zv7rApdCvkj8ZemYOt6YT4+srPPTa0PJQ:xnlS88UOnjJWz7rAQY8LYjxmL
TLSH
T142346C59B7A41CF9E577C139CD424906DB72BC5647A0E6CF13900AA68F237D09E3EB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SeroLocker.exe

File Explorer

SeroLocker.exe

.exe 234KB

SeroLocker.exe

IMPHASH 3f493961d551fd69be838191b60670fd
SHA256 43344da2c150905e1d24bf7f4a3dfa5fbdaea54fa33b5a2e05ea7db8c209e7c3
MD5 3c38ad63097cbc8b0ff8b235fb688790
SHA1 26efcc38ab220ff1e03c2a3215d9331dea2b58af
SHA512 7d523dfb94a6553743b039733ee08da6296b0a1445e10acbf46585a188aa0903c91ca4698090ceb02cc1389bb2231a01f68015c50578c1e21bf0f6c306f87382
SSDEEP 3072:c+dwo7t7woPnxQst0Q088UOnYqCwW+8zv7rApdCvkj8ZemYOt6YT4+srPPTa0PJQ:xnlS88UOnjJWz7rAQY8LYjxmL
TLSH
T142346C59B7A41CF9E577C139CD424906DB72BC5647A0E6CF13900AA68F237D09E3EB22
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

41212

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\User\source\repos\SeroLocker\x64\Release\SeroLocker.pdb

kernel32

GetLogicalDrives Sleep DeleteFileA GlobalAlloc CloseHandle GlobalLock CreateProcessA GlobalUnlock SetEndOfFile WriteConsoleW HeapSize GetProcessHeap SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage LocalFree FormatMessageA GetLocaleInfoEx CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetLastError GetModuleHandleW GetProcAddress GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetFileSizeEx SetFilePointerEx GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapFree HeapAlloc LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadFile ReadConsoleW HeapReAlloc RtlUnwind

user32

GetClassNameA OpenClipboard CloseClipboard EmptyClipboard IsWindowVisible EnumWindows SetClipboardData FindWindowA SetForegroundWindow SendInput GetWindowTextA

Sharing