2024-07-22_659c51cb1b86bc1d0b1557b5053ed1a0_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-22_659c51cb1b86bc1d0b1557b5053ed1a0_cryptolocker
Size

50KB
MD5

659c51cb1b86bc1d0b1557b5053ed1a0
SHA1

616bf214f47167fb688cf5db37148ca7c4a7f551
SHA256

4f472ae17da68f9b0521c080d616bc4e6813c19a12a811bf3cc2aff4b65e2321
SHA512

50c12fc56afdfbbf26abc53925c2ff0b797551f1322b0911dbfc67c6df2a3713529dadae88260408891e8534329960324857e3bef1bd4384e06c1a9dcf3ea9d8
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatshMl:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-22_659c51cb1b86bc1d0b1557b5053ed1a0_cryptolocker

Files

2024-07-22_659c51cb1b86bc1d0b1557b5053ed1a0_cryptolocker
.exe windows:5 windows x86 arch:x86

db206e36db5c9492ce02c61a679129e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
DestroyWindow
LoadCursorA
GetClientRect
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
DeleteFileA
CloseHandle
CreateFileA

gdi32

DeleteObject
CreateFontIndirectA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ