2024-08-25_e4a5dbaa63baacec94658cc01a5a3f62_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-25_e4a5dbaa63baacec94658cc01a5a3f62_cryptolocker
Size

72KB
MD5

e4a5dbaa63baacec94658cc01a5a3f62
SHA1

70ccd1e4514ff02ea2211db38d78e436d73ece96
SHA256

4efcfa49fac605aa188d52b9f0b500389951268bf71ad2e10ae4b52a29393fa2
SHA512

114b04d98a4b82c4248922e7d844ad081e1a7fda90d0f5ddc8d9cc7df75043c9261fa30cd85b1ac99deb7fe1edfb695d7ec1406dd6ad87b41bd98703c2253919
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZOBH:DW60sllyWOtEvwDpjwF856

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-25_e4a5dbaa63baacec94658cc01a5a3f62_cryptolocker

Files

2024-08-25_e4a5dbaa63baacec94658cc01a5a3f62_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uzwvn
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ