202404144312a964a9ef9b07e451ee3033d4b0f3cryptolocker[.]exe | Triage

Sharing

General

Target

202404144312a964a9ef9b07e451ee3033d4b0f3cryptolocker.exe
Size

31KB
MD5

4312a964a9ef9b07e451ee3033d4b0f3
SHA1

980d3ef44e577bec81a7e44b4a78fe4c0a38b19b
SHA256

0f3600b1509ecdbb171c4579b986af4997de8a80539c9be96fb047d09d2e9418
SHA512

184030a57af174bfbf83772e8fd19792259cdbd2086e54392a96f450687a0e0803834699fffb10eb04c6c11eab83e72e6a7705db175d43b67eef03e77a8c6be0
SSDEEP

384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznStEkcsJ:b/yC4GyNM01GuQMNXw2PSjSKkcu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
202404144312a964a9ef9b07e451ee3033d4b0f3cryptolocker.exe

Files

202404144312a964a9ef9b07e451ee3033d4b0f3cryptolocker.exe
.exe windows:5 windows x86 arch:x86

ad86a1414a0514f4c041167365378f70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndPaint
GetMessageA
DrawTextA
ShowWindow
UpdateWindow
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
GetWindowRect
LoadCursorA
PostQuitMessage
SetWindowPos

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
GetCurrentDirectoryA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ