2024-01-03_27b4b9da9cb835a6234f2bc969d8b7bf_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-03_27b4b9da9cb835a6234f2bc969d8b7bf_cryptolocker
Size

39KB
MD5

27b4b9da9cb835a6234f2bc969d8b7bf
SHA1

a102267f9b97df09ccf968922e567ddc2cd777f0
SHA256

c97fc2c01d7bf5ac6a7e648f23d1ee93c8859b8638c48711e8537964ff3e80a5
SHA512

956122f5b3eef50e888c89c81cf5c035875ad26d04fb60f1f82f311e667466354b85e47a7359f2465e44e66db9ab5b7ba83ff7876ba3d99875802ced709fe731
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjeJQLI3JnoehFNiY:V6QFElP6n+gMQMOtEvwDpjeJQy1hviY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-03_27b4b9da9cb835a6234f2bc969d8b7bf_cryptolocker

Files

2024-01-03_27b4b9da9cb835a6234f2bc969d8b7bf_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ