2024-01-08_2b26d0a1ed4add9711edbfa1286872dc_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-08_2b26d0a1ed4add9711edbfa1286872dc_cryptolocker
Size

39KB
MD5

2b26d0a1ed4add9711edbfa1286872dc
SHA1

b224b3413478524c4ad186c63d1d13148953139f
SHA256

47ba4a174627f4b53b99ec8519d536c9fed89ec5834d903b413ae0481d1d8439
SHA512

6dd9d52b628763b380e0bc1fa0a6b3a58011d590ff6af7808baa0c80502517f8032ce8cd3a284b577fe9eec05ffe9a1c55b7db549e1fd903ffa214857737b13d
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkeP+:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-08_2b26d0a1ed4add9711edbfa1286872dc_cryptolocker

Files

2024-01-08_2b26d0a1ed4add9711edbfa1286872dc_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ