2fdae9279597a0342054e0b236a56918_cryptolocker_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fdae9279597a0342054e0b236a56918_cryptolocker_JC.exe
Size

28KB
MD5

2fdae9279597a0342054e0b236a56918
SHA1

41bf43bcc5385b17514f2ff04efeb5a4f1f8a717
SHA256

d039e6b5cd2dd73c5203ad984ec3b130534e2ed67e9ec46ab7d78e4c5120c104
SHA512

a6e38545dc95ae4a4ded4a09f4d5535393e1e1b6dd18c3774f4faec8b2020bfddc42ed8567eb0f3a17dc7a7b7704421c1f721e6228eee08bba12329a1ea33620
SSDEEP

384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUP6h:b/yC4GyNM01GuQMNXw2P6h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fdae9279597a0342054e0b236a56918_cryptolocker_JC.exe

Files

2fdae9279597a0342054e0b236a56918_cryptolocker_JC.exe
.exe windows x86

ad86a1414a0514f4c041167365378f70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndPaint
GetMessageA
DrawTextA
ShowWindow
UpdateWindow
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
GetWindowRect
LoadCursorA
PostQuitMessage
SetWindowPos

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
GetCurrentDirectoryA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ