2024-01-09_6350235f4ff70077225ef1af78c3c6a7_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-09_6350235f4ff70077225ef1af78c3c6a7_cryptolocker
Size

43KB
MD5

6350235f4ff70077225ef1af78c3c6a7
SHA1

678a773606f45261b3676c0956a98930951c1cc0
SHA256

de8d6fbc7ae76fbebf59bce33c5dd68714aa01832cd66e5c93001b937429762e
SHA512

0d42f9f82772bc601636a1c230a0350c018d0ac31908c7f496a7787a2b799eaf0d257260c72f1bee401091904559e055a2346a04527eb64979d3a3ee2f32098f
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X38:V6QFElP6n+gMQMOtEvwDpjyaHaXW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-09_6350235f4ff70077225ef1af78c3c6a7_cryptolocker

Files

2024-01-09_6350235f4ff70077225ef1af78c3c6a7_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ