90010d1a32ab33fbd75d546fcba2135e_cryptolocker_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90010d1a32ab33fbd75d546fcba2135e_cryptolocker_JC.exe
Size

28KB
MD5

90010d1a32ab33fbd75d546fcba2135e
SHA1

7ef68d893812d5daed228ce624e7a28ded868985
SHA256

651c320775e562a71cb181abd14b2fdb0ec3b713ae10841cef579f03467161ce
SHA512

58d3bf72b8ed325d6c3f3ecf3da08f3732314bd9f5ab084962473765e239897645584645746fd19d7df8c58ae9ffd018c92e3906685c2facafa86e48956e576f
SSDEEP

384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSziM:b/yC4GyNM01GuQMNXw2PSOM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90010d1a32ab33fbd75d546fcba2135e_cryptolocker_JC.exe

Files

90010d1a32ab33fbd75d546fcba2135e_cryptolocker_JC.exe
.exe windows x86

ad86a1414a0514f4c041167365378f70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndPaint
GetMessageA
DrawTextA
ShowWindow
UpdateWindow
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
GetWindowRect
LoadCursorA
PostQuitMessage
SetWindowPos

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
GetCurrentDirectoryA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ