63a3b256d743b43b56f36af6a2841109_cryptolocker_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63a3b256d743b43b56f36af6a2841109_cryptolocker_JC.exe
Size

40KB
MD5

63a3b256d743b43b56f36af6a2841109
SHA1

2069bb30afc329ec542740b9c4108bc0caa84aa9
SHA256

f7b0e42a3d42ffd7c54f347312886c2dbd9e26cc4a7374d056dc9b6d32ecaae2
SHA512

6ca2eff37535ab9c8eaa1ec6951b3bdbfc8ceaa22b5b8eb064560bb4fecaeea5c96d10f88da3037879a1bcac1034bed77cdcfe6730ea9176a02ae56db9bb5aa2
SSDEEP

768:btB9g/WItCSsAGjX7r3BPOMHoc/QQ/J05j:btB9g/xtCSKfxLIc//a5j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63a3b256d743b43b56f36af6a2841109_cryptolocker_JC.exe

Files

63a3b256d743b43b56f36af6a2841109_cryptolocker_JC.exe
.exe windows x86

a2bfa209044e11b72a41f731968fdff2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ