2024-01-11_906b8cf3fd3430ecfcc66f34f2376913_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-11_906b8cf3fd3430ecfcc66f34f2376913_cryptolocker
Size

48KB
MD5

906b8cf3fd3430ecfcc66f34f2376913
SHA1

ca36bb23ee4ab1a02b00aee9e51da39437d83280
SHA256

c282d5b261f1de67c26a908e5b31a5c51cc591eb51739e94a70e4698f0882cb2
SHA512

8da6108aa83403756ca4c8341025e08bc0584e1feb8f2df2d0a31bec4ad723cf8d0b4b1ecfebad50269b03a0badc2a3626771875ce6be41cce9ee83921e11641
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vigM:X6QFElP6n+gJBMOtEvwDpjBtEu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-11_906b8cf3fd3430ecfcc66f34f2376913_cryptolocker

Files

2024-01-11_906b8cf3fd3430ecfcc66f34f2376913_cryptolocker
.exe windows:5 windows x86 arch:x86

7ba3aa8366ce167c7a77ebd6e6fea8e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
UpdateWindow
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
ShowWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ