2024-01-08_2c8d0e5edc22b19d754f4e1dd4ebb3fd_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-08_2c8d0e5edc22b19d754f4e1dd4ebb3fd_cryptolocker
Size

40KB
MD5

2c8d0e5edc22b19d754f4e1dd4ebb3fd
SHA1

ee1bb10148b5657e3e067efc41f6ccd2b2f136d1
SHA256

d76019668e93ca224253447593c36d70702c729f24d119ff7f32620153a7c251
SHA512

ff1e8b045f78087501b49be90a4e287bccbe037d14c21862f8ff3a5c269e4d7029576dab2f920ac1cfa4e1aa41c0b2b6b3d0d9a0541b14ab58b1f438fc5bf0c3
SSDEEP

768:b7o/2n1TCraU6GD1a4Xcn62TUdcuQlqJ51mwBBviRz:bc/y2lm6Y0AqJ51mwBaz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-08_2c8d0e5edc22b19d754f4e1dd4ebb3fd_cryptolocker

Files

2024-01-08_2c8d0e5edc22b19d754f4e1dd4ebb3fd_cryptolocker
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ