0b3e424f1d8696b969a62702b87797e4_cryptolocker_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b3e424f1d8696b969a62702b87797e4_cryptolocker_JC.exe
Size

114KB
MD5

0b3e424f1d8696b969a62702b87797e4
SHA1

c4d01c460d5a88ada37e00c4812729a7fa54684c
SHA256

573feef8fdd5227801919f5ba39e34024cf5c7f6e0b59de35974be7e09d0f649
SHA512

89892afa2081bf56f7d24a4f840e542de7f9d874fb5b85c9587cb8a85102b1759fdccb16981a22701271d36b646ef841f8acfc20cd962b99562e78cb073e5ad3
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNuj2GQi8b/xv4TSeA9+zmnwxP1:V6a+pOtEvwDpjtzS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b3e424f1d8696b969a62702b87797e4_cryptolocker_JC.exe

Files

0b3e424f1d8696b969a62702b87797e4_cryptolocker_JC.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ