LockCheck[.]zip | Triage™

General

Target
LockCheck.zip
Size 20KB
Sample261102-1pre8axscs
SHA256 62fe653b93133bde08d1a4cf5c42812949ff388c8781f3da7aaad4b18fd5d54f
MD5 c494d27416494a1b696cae71a86e0ac6
SHA1 1eae8ba62eb5db0829efa13b764d1eb8e5d8e561
SHA512 aa855c431546b7e11ca3bbbf172236bf3d27775eb5a8e0e36936a63042de5cdac4fd2b08b86c04096acf6ecb99eadb1bf670720caaa8f26e18c3a1388f2e7b37
SSDEEP 384:mT0gYKHQsQ3OcU5BO5v9868dIyFJYZh8Ppt7rapCj4Eo:k0hqQ9ecUCF98/hj0mnypBEo
TLSH
T1C9A2E0B65C672D88DBF3B2FC457A437239E022679880EA641556CAF5F16E8450BFC870
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/LockCheck.exe

File Explorer

LockCheck.zip

.zip 20KB
LockCheck.exe

.exe 56KB
LockCheck.exe.config

189B
LockCheck.pdb

37KB

LockCheck.zip

SHA256 62fe653b93133bde08d1a4cf5c42812949ff388c8781f3da7aaad4b18fd5d54f
MD5 c494d27416494a1b696cae71a86e0ac6
SHA1 1eae8ba62eb5db0829efa13b764d1eb8e5d8e561
SHA512 aa855c431546b7e11ca3bbbf172236bf3d27775eb5a8e0e36936a63042de5cdac4fd2b08b86c04096acf6ecb99eadb1bf670720caaa8f26e18c3a1388f2e7b37
SSDEEP 384:mT0gYKHQsQ3OcU5BO5v9868dIyFJYZh8Ppt7rapCj4Eo:k0hqQ9ecUCF98/hj0mnypBEo
TLSH
T1C9A2E0B65C672D88DBF3B2FC457A437239E022679880EA641556CAF5F16E8450BFC870
MD5 SHA1 SHA512 SSDEEP TLSH

LockCheck.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 91375e7640a695f857eea1513e781fdf6ad309c9b4619527328f6f02dda825c1
MD5 e71f1044693857056a0784cda4863dd2
SHA1 2bbf5e78a57a159c747bd3ab35379a658ae229a9
SHA512 0f1d9b806f72d15c57d1d828c747c3c3e24c01018749785009bf2e9a71c157630906247cf3337fac855e7b5557e9caae4e6104b90d0ad8b7fed00450178c260d
SSDEEP 768:NjgTCT8NaaevtWbzVPpuZxYK6MRRbD6n:MCTFHFWbzVPW6MRRbD6n
TLSH
T1C343B463F664CC2BC77406B01BAB529302776E35281FCB9A38C9FE4E4561B5D0BDD682
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

62634

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\LockCheck\LockCheck\LockCheck\obj\Release\LockCheck.pdb

LockCheck.zip

LockCheck.exe

mscoree

dotnet

LockCheck.exe.config

LockCheck.pdb

Sharing

General

Malware Config

Signatures

File Explorer

LockCheck.zip

LockCheck.exe

mscoree

dotnet

LockCheck.exe.config

LockCheck.pdb