202405218fe222426700d8ecccf6d411272531ddcryptolocker[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

202405218fe222426700d8ecccf6d411272531ddcryptolocker.exe
Size

44KB
MD5

8fe222426700d8ecccf6d411272531dd
SHA1

ae046bc052a473f9fca12e8a3e9e9af03f5339da
SHA256

ddb82ec5c296674227dfbe7030c77a02c8437e97c4fa1c290441e3040002d76c
SHA512

3ad71f4b6b380e674e6e7fe9f1b3665b676e34e6a2d2af6641d00ca62315e411c6aae1911fea515eb2fc93cf7f276974e6b89b79d89c94dfecbc8721ed721781
SSDEEP

768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAh:b/pYayGig5HjS3NPAh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
202405218fe222426700d8ecccf6d411272531ddcryptolocker.exe

Files

202405218fe222426700d8ecccf6d411272531ddcryptolocker.exe
.exe windows:5 windows x86 arch:x86

ad86a1414a0514f4c041167365378f70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndPaint
GetMessageA
DrawTextA
ShowWindow
UpdateWindow
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
GetWindowRect
LoadCursorA
PostQuitMessage
SetWindowPos

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
GetCurrentDirectoryA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ