2024-01-03_326a1add3985d78380ccb129372e7976_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-03_326a1add3985d78380ccb129372e7976_cryptolocker
Size

66KB
MD5

326a1add3985d78380ccb129372e7976
SHA1

596c5b41c553907f171f2e00d528e7fe11f0bf9c
SHA256

63d02a100b78ce8f103e41e34ce3062d608ca4fa987aa5a8f16e37aac0079ddf
SHA512

6c1ccf85938ba9bf166f7a2d58723d76224acc35000f1f7957d9dcbf13f890241dab56fdb9f6e720334bd732019527ce425d994f26bb260141f9ad4e0a69c0a4
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNK9:DW60sllyWOtEvwDpjwF85Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-03_326a1add3985d78380ccb129372e7976_cryptolocker

Files

2024-01-03_326a1add3985d78380ccb129372e7976_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uzwvn
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ