2024-01-01_9cedea9a1b444f685cfd10b526f37dcb_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-01_9cedea9a1b444f685cfd10b526f37dcb_cryptolocker
Size

35KB
MD5

9cedea9a1b444f685cfd10b526f37dcb
SHA1

55f36bbcd735598839e18f02e64cae9f0ff8555a
SHA256

0a27672c46ef6f96c610510575816299d04b95e79c31176c4a14056fe0f2ceda
SHA512

125ea99bd1acee4c980fbd63e60eb4056c27cbc018336da8947e6543a7dda20061f64d458cb66858c2f739820e7801dfe7896311e2adbafa33d5ee6d691f5130
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0J5ArGb:btB9g/WItCSsAGjX7e9NQF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-01_9cedea9a1b444f685cfd10b526f37dcb_cryptolocker

Files

2024-01-01_9cedea9a1b444f685cfd10b526f37dcb_cryptolocker
.exe windows:5 windows x86 arch:x86

a2bfa209044e11b72a41f731968fdff2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ