2024-01-08_56f6f81a5a489e44c7facb85e72f2e0b_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-08_56f6f81a5a489e44c7facb85e72f2e0b_cryptolocker
Size

31KB
MD5

56f6f81a5a489e44c7facb85e72f2e0b
SHA1

063dff2d5d45069682562d282d76cb6c38eddb8f
SHA256

925205c0781fd3a56fc8a31baf48b37f9cf57a91548e48f9fa7fc8eb839fe789
SHA512

aaed6fa71e79942645b8ebdcde877da86dbfb53ea4711d08c2c9cca7d2b2b70be012406784800bb1644e85974b14f7d5a5cb4619fc45141b012dc90bbfa2a092
SSDEEP

384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzu02nE:b/yC4GyNM01GuQMNXw2PSjHC02E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-08_56f6f81a5a489e44c7facb85e72f2e0b_cryptolocker

Files

2024-01-08_56f6f81a5a489e44c7facb85e72f2e0b_cryptolocker
.exe windows:5 windows x86 arch:x86

ad86a1414a0514f4c041167365378f70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndPaint
GetMessageA
DrawTextA
ShowWindow
UpdateWindow
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
GetWindowRect
LoadCursorA
PostQuitMessage
SetWindowPos

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
GetCurrentDirectoryA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ