2024-01-08_157d2ac7f0d127f033a5f9d11a48ff51_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-08_157d2ac7f0d127f033a5f9d11a48ff51_cryptolocker
Size

64KB
MD5

157d2ac7f0d127f033a5f9d11a48ff51
SHA1

c0795a1791ca1037a03895b84893c762287a9669
SHA256

00523e7b85e09a7773757c08e434faf232205f54fafef0018c1d079799466fdc
SHA512

c7cc8cd88a0c32ed74caf784e4b12a39659e020c22d6ee4d0bd6b5bdfde757c44d44b0d7c1d7d95ac1ac39994ba50817837e14f4a841f89eb085c61f9308bce5
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbg36:DW60sllyWOtEvwDpjwF8f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-08_157d2ac7f0d127f033a5f9d11a48ff51_cryptolocker

Files

2024-01-08_157d2ac7f0d127f033a5f9d11a48ff51_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uzwvn
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ