2024-01-03_227d0ab9337605e94519488fc1aa4857_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-03_227d0ab9337605e94519488fc1aa4857_cryptolocker
Size

66KB
MD5

227d0ab9337605e94519488fc1aa4857
SHA1

110b9fcb35a3a69810554092fe234fbca0e68cb2
SHA256

5f4e7a3fe8e9271f5328706d5b63cc6966290febcbab17c7c6ec2a74a8c3cde3
SHA512

440063ec70a72a92d75f63acd468f51ea275c508d63aac9718853ce4ddaeaa8f9da9646d3cdd50e18f3084ee268843fdb6d5243ca37a2bcaad9a8702c3f7d20f
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKJR:DW60sllyWOtEvwDpjwF85u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-03_227d0ab9337605e94519488fc1aa4857_cryptolocker

Files

2024-01-03_227d0ab9337605e94519488fc1aa4857_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uzwvn
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ