4c1486d9556faa69e93cf069eddae8f2_cryptolocker_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c1486d9556faa69e93cf069eddae8f2_cryptolocker_JC.exe
Size

43KB
MD5

4c1486d9556faa69e93cf069eddae8f2
SHA1

6389355b8bf84ee66b7b07151631da0f013abd1e
SHA256

434713de8f7c808dea4a7dcb9288ef201d8ca21d57a286be50d2f2f3ccc2802c
SHA512

94e74c87dacc223a283c3b7d12fc71159b84af497af36390f6f68642a0bbf5c611ee4696b2f38db46860c9ed7338f65a673f5464be0533bc50a3ccd9120a87d3
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUO:vj+jsMQMOtEvwDpj5Hczer5ix

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c1486d9556faa69e93cf069eddae8f2_cryptolocker_JC.exe

Files

4c1486d9556faa69e93cf069eddae8f2_cryptolocker_JC.exe
.exe windows x86

5c55d83b58dbc1f7154223c32a893074

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
UpdateWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetCPInfo
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ