2024-08-20_1e39078e725ae4e035b95fc29c72ba6d_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-20_1e39078e725ae4e035b95fc29c72ba6d_cryptolocker
Size

44KB
MD5

1e39078e725ae4e035b95fc29c72ba6d
SHA1

7111902f6c4c076f4375d1817179539a264caaa2
SHA256

aa9a6094c4967316c3b0d54ba986a9d26c0df95c4ab9f1fc2cd71a08df390091
SHA512

ee69e1efba446e12568bc0a289c4c011271b8a137863a11d1f05a57647beb684841682fbd515354f75b2cd3b26eb94e8192e6f4e09d81ece3ea1fb51392ccb5c
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1T1b:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-20_1e39078e725ae4e035b95fc29c72ba6d_cryptolocker

Files

2024-08-20_1e39078e725ae4e035b95fc29c72ba6d_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ