a0b2a0724ae722d80eea42ab47ae29c4_cryptolocker_JC[.]exe | Triage

Sharing

General

Target

a0b2a0724ae722d80eea42ab47ae29c4_cryptolocker_JC.exe
Size

62KB
MD5

a0b2a0724ae722d80eea42ab47ae29c4
SHA1

88e4ffc5868b0eb819846273d2fbe0a3218150cd
SHA256

dc860be0e8e4c49299107b02e91825b29fb6c955db14e94c7ff7a154b6457ef4
SHA512

b284d1c4da69109a8250c1b02d152e733ef6929bea0d8415054e57f09406b0e12ab3b0853953db5c2b1c6530f89c640f1299f05fb9875543e0788d068c48f36e
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniaKI:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0b2a0724ae722d80eea42ab47ae29c4_cryptolocker_JC.exe

Files

a0b2a0724ae722d80eea42ab47ae29c4_cryptolocker_JC.exe
.exe windows x86

db206e36db5c9492ce02c61a679129e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
DestroyWindow
LoadCursorA
GetClientRect
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
DeleteFileA
CloseHandle
CreateFileA

gdi32

DeleteObject
CreateFontIndirectA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ