NEAS[.]2023-09-06_7cf11d63b2849c16f41945281e73424b_cryptolocker_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2023-09-06_7cf11d63b2849c16f41945281e73424b_cryptolocker_JC.exe
Size

36KB
MD5

7cf11d63b2849c16f41945281e73424b
SHA1

0795b81ac265272126fecd5d1cbc2c164ace107f
SHA256

e51d9ff76595baf4a7a294b0d639418565040f4e2024db28feb4d77ef34a8203
SHA512

4491d582aee4740a62a87c28ad0569a9e64c2ea2d68547dd35b7a9c2607f97539811d87b028068d955c32dbd88b02f2e64d7576ae376bdd703728ff06c82be87
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2BodcAOjbQ36ttT1:btB9g/WItCSsAGjX7r3BGub8C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2023-09-06_7cf11d63b2849c16f41945281e73424b_cryptolocker_JC.exe

Files

NEAS.2023-09-06_7cf11d63b2849c16f41945281e73424b_cryptolocker_JC.exe
.exe windows:5 windows x86

a2bfa209044e11b72a41f731968fdff2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ