2024-01-06_76952f8d9f8f64c99ef6eb79f8469284_cryptolocker | Triage

Sharing

General

Target

2024-01-06_76952f8d9f8f64c99ef6eb79f8469284_cryptolocker
Size

80KB
MD5

76952f8d9f8f64c99ef6eb79f8469284
SHA1

dad99b21c7d519a777f58bde4fdc790e59973fd6
SHA256

09c42cd3e19dae26b9dd705a158abe94369e776029b7f03c5ac0c1d17095fdc7
SHA512

98caf04b9aa509a94a944baa2bc70b0a4195bc9a9f97cbf2c30e08b08b45a85d0132c6f96fcb8eab3bc7a29d6d240f694f458bc93f06989d27b0d2375ff99ea1
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yFP6:V6QFElP6n+gMQMOtEvwDpjyaLccVNl4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-06_76952f8d9f8f64c99ef6eb79f8469284_cryptolocker

Files

2024-01-06_76952f8d9f8f64c99ef6eb79f8469284_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ