2024-01-06_7e5ddf45294b13b56c98c31771548d70_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-06_7e5ddf45294b13b56c98c31771548d70_cryptolocker
Size

47KB
MD5

7e5ddf45294b13b56c98c31771548d70
SHA1

4ae6af95cd482354d0d78a2da36fec922b3efad6
SHA256

81757fcd535441e68be5248770538ce48206b72c732cb5bebe2b5784ae50278b
SHA512

493d5a7a83c8ac683ed68ba399eb75c7304a5a9761d60bde85457555524124dbf925bac33c92fce805f7cdfbd0c5dfa434f8507a95bd186070784a1c2b19e1c4
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjeJQ7suIlsw92KFXckd3sRC:V6QFElP6n+gMQMOtEvwDpjeJQ7pojakR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-06_7e5ddf45294b13b56c98c31771548d70_cryptolocker

Files

2024-01-06_7e5ddf45294b13b56c98c31771548d70_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ