3f71d7211b4423f95eed56a2d8c1fde2_cryptolocker_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f71d7211b4423f95eed56a2d8c1fde2_cryptolocker_JC.exe
Size

30KB
MD5

3f71d7211b4423f95eed56a2d8c1fde2
SHA1

f776859f785d92a3424c8b0d383a20fe246fb041
SHA256

f4c3d93e011f23aecba9ff348f5b167e204da003f9d592ee0661ab342567e5bc
SHA512

3e008c1f8caacbdc4fc8bb9df2b47fc96f91db4306b1dbdc29f573b78447a010ce96cfbd181e374119f0c2c6105f8f9f88b3f7b1f48068bd006e59a0798d1444
SSDEEP

384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoi0WlLYZAMT:b7o/2n1TCraU6GD1a4X0WlKH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f71d7211b4423f95eed56a2d8c1fde2_cryptolocker_JC.exe

Files

3f71d7211b4423f95eed56a2d8c1fde2_cryptolocker_JC.exe
.exe windows x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ