2024-01-09_8f24f814b0e5920b43e7971c2d862a03_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-09_8f24f814b0e5920b43e7971c2d862a03_cryptolocker
Size

42KB
MD5

8f24f814b0e5920b43e7971c2d862a03
SHA1

0f0920da1b078b49f663fe82a03c893a0c3742d2
SHA256

9af9d6590525b21bae9317b9c32993b151549b850a64f2ae502fc9978166b6f3
SHA512

143053af985eadb01cfab31573d9cdd79310ea794df9c158b8e7452c8db48216ffa59f0314bcd99dbc332d32884dc2cf15f8da185d686f5e81df4150db73c2d9
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedm+YUtW:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-09_8f24f814b0e5920b43e7971c2d862a03_cryptolocker

Files

2024-01-09_8f24f814b0e5920b43e7971c2d862a03_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ