2024-07-10_cc2f6c2708c96f0e9474a22012d8b465_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-10_cc2f6c2708c96f0e9474a22012d8b465_cryptolocker
Size

39KB
MD5

cc2f6c2708c96f0e9474a22012d8b465
SHA1

a983534b9c7834225ace8a4461925c8034e76a5e
SHA256

bebed1a4b62715d5a8665cfdba902d00edc38e29ad3f74d01457f636578ab39a
SHA512

d2ae19768887e8544f9e331622c77e5fa43570821a93f1ca2ad0ac1b2123b060254d064da5bc71ea157b61805c10c4ab92a29a8b74129e185a3ef884e34c3fea
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRSy3LY:btB9g/WItCSsAGjX7e9N0hunRvs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-10_cc2f6c2708c96f0e9474a22012d8b465_cryptolocker

Files

2024-07-10_cc2f6c2708c96f0e9474a22012d8b465_cryptolocker
.exe windows:5 windows x86 arch:x86

a2bfa209044e11b72a41f731968fdff2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ