2024-01-08_9351bdbee839ed6d03731d49236b1b11_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-08_9351bdbee839ed6d03731d49236b1b11_cryptolocker
Size

27KB
MD5

9351bdbee839ed6d03731d49236b1b11
SHA1

22d956928d4510a3b26cdb40f6fbcd5318a4ac98
SHA256

eb31cce2c531679e4c6aa1f5b0049f2b79ffed96c5dc51ec1b2f10dbd2d3b248
SHA512

9574d8e99d4f7998c6736fbed00f365c2cd656da0a872ee5ba14d94c0dc83cfa0ac7d127fbd75d62b8a804c59a66214975c4f2a5d3673ba204a2cd405a559c35
SSDEEP

384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzot6IT:bAvJCYOOvbRPDEgXET

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-08_9351bdbee839ed6d03731d49236b1b11_cryptolocker

Files

2024-01-08_9351bdbee839ed6d03731d49236b1b11_cryptolocker
.exe windows:5 windows x86 arch:x86

5a4767bc6f06914cff6e249c178e3b95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageA
DrawTextA
EndPaint
BeginPaint
PostQuitMessage
ShowWindow
UpdateWindow
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ