2024-01-10_affa657bdc3be1e11c7d09d7a1878986_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-10_affa657bdc3be1e11c7d09d7a1878986_cryptolocker
Size

75KB
MD5

affa657bdc3be1e11c7d09d7a1878986
SHA1

23841d62ef94e1ef3022b6e858c1614bed0e6dc4
SHA256

c68fa9ea525f76efded3295e1d3b24a6cef014f767d1d790c1abf7e49be8b349
SHA512

6fa3867ffe08bce7f0183ffa76e511da413692c9bb8e72e54fdad11efd5b4a366ab251ea7b43d5b9b65822872b82ebc72aa3d1e932bd23fd8426299c53684b2a
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4U9HueDgaRWDtJgXkeUTn8k6:vj+jsMQMOtEvwDpj5H8u8rLXkemnM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-10_affa657bdc3be1e11c7d09d7a1878986_cryptolocker

Files

2024-01-10_affa657bdc3be1e11c7d09d7a1878986_cryptolocker
.exe windows:5 windows x86 arch:x86

5c55d83b58dbc1f7154223c32a893074

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
UpdateWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetCPInfo
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ