5ca03f6a3c55b65a49f708f6cf99e447_cryptolocker_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ca03f6a3c55b65a49f708f6cf99e447_cryptolocker_JC.exe
Size

43KB
MD5

5ca03f6a3c55b65a49f708f6cf99e447
SHA1

220d4b78a54b8d62fc94605047d98ae62d73ad75
SHA256

0230d37600e39fd96412f3ea818540c5676bc17535afa5af46f2113efe0dfd80
SHA512

dd55fc14594dbe60a98616295f8152e12ae4357b3cf19ef1820c16ede8560c87bcf74911a7bef1ab2bc6589186c97bcc78e5f67c87a2f488ea1a4ef3ff3566c5
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrnGsz:vj+jsMQMOtEvwDpj5HczerGsz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ca03f6a3c55b65a49f708f6cf99e447_cryptolocker_JC.exe

Files

5ca03f6a3c55b65a49f708f6cf99e447_cryptolocker_JC.exe
.exe windows x86

5c55d83b58dbc1f7154223c32a893074

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
UpdateWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetCPInfo
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ