2024-01-01_e1bdd9a60dbf6446d3ec30650e012492_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-01_e1bdd9a60dbf6446d3ec30650e012492_cryptolocker
Size

65KB
MD5

e1bdd9a60dbf6446d3ec30650e012492
SHA1

5219cbcfff6e3742be3ef17c31acb6b7bb7d0165
SHA256

b165ad62f082e6d36be9d06bd7a433751f84d7638eb99f1b0c7f489951ed074f
SHA512

91c9d5c7b48e6727000cdda2abb9b7dfa482fe100e12fb8b2a72c1eb8ea1697fa4b320aa62d168b89c04fb7ca41be41e199e8c2a248b71ec317345bf1fd66c48
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKJH:DW60sllyWOtEvwDpjwF850

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-01_e1bdd9a60dbf6446d3ec30650e012492_cryptolocker

Files

2024-01-01_e1bdd9a60dbf6446d3ec30650e012492_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uzwvn
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ