2024-06-15_cc60f1fef7151af6d07cf08e30cd119b_locky | Triage

Sharing

General

Target

2024-06-15_cc60f1fef7151af6d07cf08e30cd119b_locky
Size

517KB
MD5

cc60f1fef7151af6d07cf08e30cd119b
SHA1

70beea7df6b48c35f12ce9be10b09c89c1fcddb5
SHA256

2646ec67308fdc3f42794bda0f9533e4624dc9b53cd74f321439df77963bfc06
SHA512

570e75f3e30dad4c70bc6a9bf5db5fea8aeef121c6ed2d69bd772d58c2fa6f75659ab063e764397bf59f18dc5a4ceb7ad8020a412eaf022058f13f29b44a49c1
SSDEEP

12288:zVRm47ugq9QLXzNWVn4Fkl6BQ2yLhxPtIS4GudgBXllbXtQK:zVzzzjNO4FkUQ2yL7PtIdGudqlb9QK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-06-15_cc60f1fef7151af6d07cf08e30cd119b_locky

Files

2024-06-15_cc60f1fef7151af6d07cf08e30cd119b_locky
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 473KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.cdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ