2024-08-03_9ca5f7a17dc7a784750f5f200aa460c3_cryptowall | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-03_9ca5f7a17dc7a784750f5f200aa460c3_cryptowall
Size

328KB
MD5

9ca5f7a17dc7a784750f5f200aa460c3
SHA1

5dcbba39513aaf4b23b4d9df3972b5bc5bc70b0d
SHA256

b304b93b10b779501e8652d10f6eb8bb5fdd31b16ab5a03b93e4413bfa93115b
SHA512

d4f9063e49f20345b7870268ff70a6bd3ca19b018e4f05fa987a888a8e163d52ba62c5f2ec03dfff93a184cdbe32cb2ecdd719c13d3b62626c11821b0c770f94
SSDEEP

6144:rb1fdEt8AWr9Xj9WV1oqCgQfBUPy8LWVBBhH+gQjsPPxQO01IhBS52somE3BIYFc:VftAWr98Cg0ekNQ4PaIdB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-03_9ca5f7a17dc7a784750f5f200aa460c3_cryptowall

Files

2024-08-03_9ca5f7a17dc7a784750f5f200aa460c3_cryptowall
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.newIID
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE