2023-04-20_a8bdd3f5d4e14cc9dc029630df8e0458_cryptowall[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2023-04-20_a8bdd3f5d4e14cc9dc029630df8e0458_cryptowall.exe
Size

172KB
MD5

a8bdd3f5d4e14cc9dc029630df8e0458
SHA1

77061bc9ec70e76b9ce16141f0072eed13a5b0b4
SHA256

3b0c95d97843299822c4bca2d1a38116c3f9b89b0a4a0541d7c0b1da10ff18d9
SHA512

6a65c84c15bee21cbdcadc6311e851d6ee57d2c77820ef7f1abf40facdf1b1f159d663c08cc8a3f43fff36de3fd790d09acca26a0b066a37ccda79a04556defd
SSDEEP

3072:D6il7jPiQ4nId7Dr4wnEch1mfcGIR8oL2AA5NWCdxN2UnPF1ELW5550:DhiVKDr4wE4MfcunAA5NWCdxN2UPF1E/

Score

1^/10

Malware Config

Signatures

Files

2023-04-20_a8bdd3f5d4e14cc9dc029630df8e0458_cryptowall.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ