2024-01-03_2f8ac08766e336da602a472f17454481_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-03_2f8ac08766e336da602a472f17454481_cryptolocker
Size

43KB
MD5

2f8ac08766e336da602a472f17454481
SHA1

24118dab6a70351efe8193d3c5e51bbce3c82c9b
SHA256

98d0a61b629da72d6d2b0f8f346b872d3ed056f0064ddf50848a2323c3108ed2
SHA512

399c6f760c3a2d01c66dc03081f602828c7319253b7ef486d457908de4696468ea25aadf151f92281e21c732c63c38886fdbe9cc715f13325c4d6be08cdcacc5
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedmhTMf:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-03_2f8ac08766e336da602a472f17454481_cryptolocker

Files

2024-01-03_2f8ac08766e336da602a472f17454481_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ