bf264d86c754a8970ef53c70130f1cf8_cryptolocker_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf264d86c754a8970ef53c70130f1cf8_cryptolocker_JC.exe
Size

89KB
MD5

bf264d86c754a8970ef53c70130f1cf8
SHA1

4ee31792e6cbb165d17d29cd3106284cd1dc6b84
SHA256

a9b871136d44150cc6bde20d8f9c25905fd90bea4a80117636b39b4d557fb49f
SHA512

5073f16e85c391e7922d2f26230c37de165f98e90caaffba111731984db3f09f9e416c7d5afa2cba68896491984749bf9b6e0eafc14ddae71625caa3f3d183d2
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjQGYQbNcqamvWN:V6a+pOtEvwDpjtY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf264d86c754a8970ef53c70130f1cf8_cryptolocker_JC.exe

Files

bf264d86c754a8970ef53c70130f1cf8_cryptolocker_JC.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ