20240531eed78b0bd1c8471de8c072dc66ab7467cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20240531eed78b0bd1c8471de8c072dc66ab7467cryptolocker
Size

64KB
MD5

eed78b0bd1c8471de8c072dc66ab7467
SHA1

3ffc2ed495e67db5244ed3c3ac55eca173b54800
SHA256

0dd11b628b25e88824dceddc00740110b8339d6240bb8e5554429c7a378a5355
SHA512

b33c2da63d10331e4897ef07c112e03b020d3ba489adaf29b2b3a94a6c0a72cf0713ad4c400a8e6f732e6b1c545c62fac28101fe0fbf4e263491221be507cbd6
SSDEEP

1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsim:BbdDmjr+OtEvwDpjM8T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20240531eed78b0bd1c8471de8c072dc66ab7467cryptolocker

Files

20240531eed78b0bd1c8471de8c072dc66ab7467cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

bUItIFMf
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

QNhjSkbP
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE