2024-01-01_f9b130d8511d4dcdc3f5733a64558a8f_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-01_f9b130d8511d4dcdc3f5733a64558a8f_cryptolocker
Size

40KB
MD5

f9b130d8511d4dcdc3f5733a64558a8f
SHA1

5bde677152c378a727d1cf6a22824c0c5938ffd6
SHA256

51ff0a2445443d0fed627a26bf9d0797bbb30cb43cf6b77ece42c91e66c5f9e2
SHA512

d9abda9ec49d8c8ae02bd65623d3a31f36951f15db0b797c5b9680dd0dd0d9c81cfd63ac8c3b1368467666a451de720fe49dfc3371898ce84c902cb08b624742
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkeY:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-01_f9b130d8511d4dcdc3f5733a64558a8f_cryptolocker

Files

2024-01-01_f9b130d8511d4dcdc3f5733a64558a8f_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ