2024-01-10_d398e053e3ab715d68628d85e074b750_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-10_d398e053e3ab715d68628d85e074b750_cryptolocker
Size

64KB
MD5

d398e053e3ab715d68628d85e074b750
SHA1

0f05dea2f91bcd1dd4040fd1a9dc9b93dc9b0a84
SHA256

afe0eb7c02818ab9f1b8024d27192e93e60f13656479c5a68e99a3c67347d793
SHA512

852abe209ac0464c4ee9a5ca5f6dba2781a80bf874f3188ce1cc0a3b0f84170fcdd3f8acfb083a29a349e51acd7af9acdcdd1412ef7afa896ceb3de37d6c1a63
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbg3i:DW60sllyWOtEvwDpjwF8f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-10_d398e053e3ab715d68628d85e074b750_cryptolocker

Files

2024-01-10_d398e053e3ab715d68628d85e074b750_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uzwvn
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ