локер[.]zip | Triage™

General

Target
локер.zip
Size 91KB
Sample261020-tk3jcsssdw
SHA256 00543b36fb1d3283369a5fda15876473b0ce46e28977a9202c2dfab982d0d704
MD5 e09344b0de4321d8f85a54dd254a28f8
SHA1 86306e01eaff06cc3106c0b7f09cca0ca7ad8235
SHA512 1509bafb987789bf2138727312dd87c910ae27b0b5133dd017b24a472fdd09238e26c7e31c23e97e97d44433b7ba89411a0fb745a855bd4ae777920b9bfef4ec
SSDEEP 1536:9bfjVWREDhYnvjrrmOQyvuvwQ+Cp2KnGn1dRAa/BcWw2sv4ma6nLcZOIO0Mg:9fVewhYvvKO/uwQrYsGvKagv6kcZZO09
TLSH
T1DC93127EE18FE912A31EC13F78E55FB07E0D06C8AB6359E4528DD2C506D9DDE9361A00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/WinLock1.exe

File Explorer

локер.zip

.zip 91KB
WinLock1.exe

.exe 209KB

локер.zip

SHA256 00543b36fb1d3283369a5fda15876473b0ce46e28977a9202c2dfab982d0d704
MD5 e09344b0de4321d8f85a54dd254a28f8
SHA1 86306e01eaff06cc3106c0b7f09cca0ca7ad8235
SHA512 1509bafb987789bf2138727312dd87c910ae27b0b5133dd017b24a472fdd09238e26c7e31c23e97e97d44433b7ba89411a0fb745a855bd4ae777920b9bfef4ec
SSDEEP 1536:9bfjVWREDhYnvjrrmOQyvuvwQ+Cp2KnGn1dRAa/BcWw2sv4ma6nLcZOIO0Mg:9fVewhYvvKO/uwQrYsGvKagv6kcZZO09
TLSH
T1DC93127EE18FE912A31EC13F78E55FB07E0D06C8AB6359E4528DD2C506D9DDE9361A00
MD5 SHA1 SHA512 SSDEEP TLSH

WinLock1.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 63e7fd8f9e880643d8fd7c898bfb81f40dcb5daaf865088edfd825f17abf407a
MD5 2ce32004b68af88ffe4cf1431960ee8f
SHA1 21af4cde93810f8be5bfd3c3e71863468ed17073
SHA512 16e1d15dfef43174a4fbb17eaeff2d197cad9aef56ed82ed1ba9835c01fe91895e930b1dec37d71fd4d8e1b16edcefa365e39a4eaa389a2c805c4b975bb14b8d
SSDEEP 6144:NEhfGkHBdZynRtjUax9aygCSCpMW90KImQijnfbgL:S++doj
TLSH
T166244D98136AC93DC2BE27BED0A611060BF0B217D503E75CAFF8A0E66D37711A715A47
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

219566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

локер.zip

WinLock1.exe

mscoree

dotnet

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

локер.zip

WinLock1.exe

mscoree

dotnet