2024-01-03_1084869c28d1f59ad3ed495e456ac0f3_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-03_1084869c28d1f59ad3ed495e456ac0f3_cryptolocker
Size

37KB
MD5

1084869c28d1f59ad3ed495e456ac0f3
SHA1

e2b1f9f130358836cf9ce5aba03e56b762a0e738
SHA256

61d5b28f8465454380782b2528e5643f0b315f281ac9ab8573a607d3cd7c8b74
SHA512

a00a7f5979075dd674ba56c565b728cf9e51b62d29ae9894e8ecbedb467857c46976634705460ff896d34397c43e5d2a2e252062de2fbb5f7cc9ce5bd0e3558d
SSDEEP

384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlxuX:b/yC4GyNM01GuQMNXw2PSjHPbSuYl+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-03_1084869c28d1f59ad3ed495e456ac0f3_cryptolocker

Files

2024-01-03_1084869c28d1f59ad3ed495e456ac0f3_cryptolocker
.exe windows:5 windows x86 arch:x86

ad86a1414a0514f4c041167365378f70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndPaint
GetMessageA
DrawTextA
ShowWindow
UpdateWindow
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
GetWindowRect
LoadCursorA
PostQuitMessage
SetWindowPos

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
GetCurrentDirectoryA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ