6680a0ca69d81a338cbc71b5fa73a28d_cryptolocker_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6680a0ca69d81a338cbc71b5fa73a28d_cryptolocker_JC.exe
Size

71KB
MD5

6680a0ca69d81a338cbc71b5fa73a28d
SHA1

efaba81d923cbf9ffd67a85fc0fe9b5b90d2c6bd
SHA256

fdc0b71f41a4e5537ff4604a86599e70a640f4f10366b9a8a912c3d2772b90a4
SHA512

858a42453a8195ba50c43ac7d3489cf82293e7b6e0ccdcb9ca2356f9e51b2628ab271751bde04ad4051d2b85bb4077f7717f23ef810ef3a14c64640466a75142
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4U9HueDgaRWDtJgXkeLYk:vj+jsMQMOtEvwDpj5H8u8rLXkel

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6680a0ca69d81a338cbc71b5fa73a28d_cryptolocker_JC.exe

Files

6680a0ca69d81a338cbc71b5fa73a28d_cryptolocker_JC.exe
.exe windows x86

5c55d83b58dbc1f7154223c32a893074

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
UpdateWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetCPInfo
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ