8688ceb429352f9fe4f87020a093fefd_cryptolocker_JC[.]exe | Triage

Sharing

General

Target

8688ceb429352f9fe4f87020a093fefd_cryptolocker_JC.exe
Size

61KB
MD5

8688ceb429352f9fe4f87020a093fefd
SHA1

6ea4f33179a8c100a2fca5a536ef62167fcb4cef
SHA256

1d33a045dca983bff52fb240af6d612f3f101195aac916b443926d26323ba058
SHA512

613a8a524af4718f15646bd2f91cb65b61742326f9b56ea830b323122d0e2bea2cfe2af272cdeb715e488eb9c25b85225af60afc092554e778a4955065912208
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xo3/nyxy:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8688ceb429352f9fe4f87020a093fefd_cryptolocker_JC.exe

Files

8688ceb429352f9fe4f87020a093fefd_cryptolocker_JC.exe
.exe windows x86

db206e36db5c9492ce02c61a679129e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
DestroyWindow
LoadCursorA
GetClientRect
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
DeleteFileA
CloseHandle
CreateFileA

gdi32

DeleteObject
CreateFontIndirectA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ