738bc21199c89120e1fa3e43ddb5de11_cryptolocker_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

738bc21199c89120e1fa3e43ddb5de11_cryptolocker_JC.exe
Size

44KB
MD5

738bc21199c89120e1fa3e43ddb5de11
SHA1

5b1f4268908d5950a6a4805870b4d2a042df6cbb
SHA256

3c532c3f2a723d1a8e53a081f6a1a0428a3ae8c47ed338e86ffba830a982dada
SHA512

1fe23e95be6d9b36e5d27c8f349d70b4df2ea570d3d87fea18f536a0692369b82dca7084cfe19fcc35c66f1bcac071c52d88119c32dfbff402d3c7287849a04a
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrnGsX:vj+jsMQMOtEvwDpj5HczerGsX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
738bc21199c89120e1fa3e43ddb5de11_cryptolocker_JC.exe

Files

738bc21199c89120e1fa3e43ddb5de11_cryptolocker_JC.exe
.exe windows x86

5c55d83b58dbc1f7154223c32a893074

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
UpdateWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetCPInfo
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ