69fbde7724411ad23ea08f811e58ddc4_cryptolocker_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69fbde7724411ad23ea08f811e58ddc4_cryptolocker_JC.exe
Size

52KB
MD5

69fbde7724411ad23ea08f811e58ddc4
SHA1

2ca5d3dd5d890b904260f950a3203626b83c82f7
SHA256

531686aab2515b5017e3fe207d878f6691fa47a79c1bfc480fda0515ba85d7dc
SHA512

ff2ea2b48bb4ec96521c97c295bb28c7fffc39b0b7f84b3e8a6f5d565944e11350d7f4aee89f65a18281f4edaec44feb154d1c9745fe04251afe6c1b16af4228
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzp0ojj/:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69fbde7724411ad23ea08f811e58ddc4_cryptolocker_JC.exe

Files

69fbde7724411ad23ea08f811e58ddc4_cryptolocker_JC.exe
.exe windows x86

db206e36db5c9492ce02c61a679129e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
DestroyWindow
LoadCursorA
GetClientRect
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
DeleteFileA
CloseHandle
CreateFileA

gdi32

DeleteObject
CreateFontIndirectA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ