5d5f2ed1480bec67ba0ed49b60b3b8ebbdf1b2e78139276878b7bf4f0e0798c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d5f2ed1480bec67ba0ed49b60b3b8ebbdf1b2e78139276878b7bf4f0e0798c8
Size

43KB
MD5

b769cdd7b4343547513993351801ce31
SHA1

475133b2b4c163e47b86902bd052f3ca64f1c0f5
SHA256

5d5f2ed1480bec67ba0ed49b60b3b8ebbdf1b2e78139276878b7bf4f0e0798c8
SHA512

933c5ed8fc1b6aa18b03543959a644177ca5e00f82b5ab71eecc17830814a7b7237f612594cb872f5f46122441a233fa75cd769b07092bd9a76f851a9e0a0492
SSDEEP

768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphqn:bc/y2lkF0+Beqn

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d5f2ed1480bec67ba0ed49b60b3b8ebbdf1b2e78139276878b7bf4f0e0798c8

Files

5d5f2ed1480bec67ba0ed49b60b3b8ebbdf1b2e78139276878b7bf4f0e0798c8
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ