2024-01-08_f19c51947a3505e4d88cbc6731a0f833_cryptolocker | Triage

Sharing

General

Target

2024-01-08_f19c51947a3505e4d88cbc6731a0f833_cryptolocker
Size

92KB
MD5

f19c51947a3505e4d88cbc6731a0f833
SHA1

37024414e5037e89e8ba39994e35a6dea8680a4c
SHA256

57768f3603deb6775740eef3880bbc0c9227b60e0d464173da868e61c8fb155e
SHA512

40abc1a472fb904113957ea1a2fc48a39c358b34f318feb4bbaccd1b0f9f9fa573a693943fe561ce5d4d6daa4d7025cb9b83ebb16f1be85baaae145e2cd29046
SSDEEP

1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNC7:26a+2OtEvwDpjtzI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-08_f19c51947a3505e4d88cbc6731a0f833_cryptolocker

Files

2024-01-08_f19c51947a3505e4d88cbc6731a0f833_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ