68367861547f2805dab9de7f3245465d_cryptolocker_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68367861547f2805dab9de7f3245465d_cryptolocker_JC.exe
Size

75KB
MD5

68367861547f2805dab9de7f3245465d
SHA1

3d80b194ab1850d8de842566c0851dbe842d6c69
SHA256

ee1defccccb2d5bf1d6b00f2139d8fb0185d6634a2cb1fb210a36e36ccc7ec35
SHA512

cbd48a9ad73ee725087e9052ddc81b9c879b8f961e0bf5293862020cd9085421ab046be2a6fc1613711e65193200327392f16a03dac6b616df24acd2292f36d3
SSDEEP

1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfyQ1z:vCjsIOtEvwDpj5H9YvQd2P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68367861547f2805dab9de7f3245465d_cryptolocker_JC.exe

Files

68367861547f2805dab9de7f3245465d_cryptolocker_JC.exe
.exe windows x86

5c55d83b58dbc1f7154223c32a893074

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
UpdateWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetCPInfo
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ