2024-01-10_8968e718dbb71b0b0cd8c622670fe162_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-10_8968e718dbb71b0b0cd8c622670fe162_cryptolocker
Size

41KB
MD5

8968e718dbb71b0b0cd8c622670fe162
SHA1

341cfc077caadc538e33a648e7fafef63c0f7eec
SHA256

d57a7e570ee8e98049922a97394986e6d3f2f4a8a7eccba61f87ca8b2e7a1249
SHA512

a1e40694dc8a5385a5706d38f940e7bec3c795e5da88e809fb9f14d72dccefbcec812cc188dffb48a6230b3ccb922f736c0c798d688e0d052200093349da8b55
SSDEEP

768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqrwGs:bc/y2lkF0+Bjrds

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-10_8968e718dbb71b0b0cd8c622670fe162_cryptolocker

Files

2024-01-10_8968e718dbb71b0b0cd8c622670fe162_cryptolocker
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ