2024-08-12_7013cf682d98c1e608c80bc97f2913a3_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-12_7013cf682d98c1e608c80bc97f2913a3_cryptolocker
Size

72KB
MD5

7013cf682d98c1e608c80bc97f2913a3
SHA1

140a5b8ce2679600affe29626cccc08a37adb86c
SHA256

cedf9141cb12afb288221ee093b6dd5818206f6a08eebf86bec99e00dbb9b37a
SHA512

b0a166b8f1bde313338e53cb0954a5378a7ed2ceb8c7457b880ee1d7a63f0e6949bb861e4de938eba542e4b8d7b9b6849860ee13ac36dd9237d0e1fa430b2515
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZOQ2A:DW60sllyWOtEvwDpjwF85p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-12_7013cf682d98c1e608c80bc97f2913a3_cryptolocker

Files

2024-08-12_7013cf682d98c1e608c80bc97f2913a3_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uzwvn
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ