NEAS[.]2023-09-06_51711bbe2594539f5e818bfab630356d_cryptolocker_JC[.]exe | Triage

Sharing

General

Target

NEAS.2023-09-06_51711bbe2594539f5e818bfab630356d_cryptolocker_JC.exe
Size

38KB
MD5

51711bbe2594539f5e818bfab630356d
SHA1

be0a01b0f18e290b09cf6ca16dc70e3465728489
SHA256

1173900a14a0d9de3390b65df0e77ffe3e719eb58498060055932f50745d2997
SHA512

5fe68e68ee66d940a0d872499b390da8e7b1ce53989636e9fe331a3ab3f6fccaac715794d44ea85b040aaa322155f679b33b994d691e51a94659d9b4d0a02219
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkegAf:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2023-09-06_51711bbe2594539f5e818bfab630356d_cryptolocker_JC.exe

Files

NEAS.2023-09-06_51711bbe2594539f5e818bfab630356d_cryptolocker_JC.exe
.exe windows:5 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ