48b14c08c1c34555aabc20db945d113c_cryptolocker_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48b14c08c1c34555aabc20db945d113c_cryptolocker_JC.exe
Size

85KB
MD5

48b14c08c1c34555aabc20db945d113c
SHA1

83f91be0b448631fdb6d9defd31e9cc61e0cd701
SHA256

ae87f39064f7479d62e6bc15a036c2f274b613228342ae8fc3c1e1f1bb7981a4
SHA512

58a1a9360dbae3a3d25dfa20c03dbfd7a248f26f115a9d6d8eadf6fd6bccdeb78b63a40f1ab2aa978614335b26dd16fc85246966e8ac70f64f564ca168425322
SSDEEP

1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNieRpj:vCjsIOtEvwDpj5H8zPy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48b14c08c1c34555aabc20db945d113c_cryptolocker_JC.exe

Files

48b14c08c1c34555aabc20db945d113c_cryptolocker_JC.exe
.exe windows x86

5c55d83b58dbc1f7154223c32a893074

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
UpdateWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetCPInfo
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ