2024-01-01_b1a0d20bcfa965bb6310aebb9dce0d68_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-01_b1a0d20bcfa965bb6310aebb9dce0d68_cryptolocker
Size

89KB
MD5

b1a0d20bcfa965bb6310aebb9dce0d68
SHA1

82999fb8ccb67a522d783ae12b25653a6f3a73a2
SHA256

407fe1791f21447a0163c5cd0cf9673d9dc013f4c477d1813eee935a5a0353dd
SHA512

176919e497dddeb7aedda502aa66e8eddf12d24291e91a1c1999fa6ae38f0a6e93b6d2e0b2d39523d9ce9670477edcf3e2d23d214a237c55083a6663c09e990f
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjQGYQbNcqamvWHShl/3Ss:V6a+pOtEvwDpjtl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-01_b1a0d20bcfa965bb6310aebb9dce0d68_cryptolocker

Files

2024-01-01_b1a0d20bcfa965bb6310aebb9dce0d68_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ