2024-08-29_dcc8b96a29a04f5365715b51f8c0f46c_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-29_dcc8b96a29a04f5365715b51f8c0f46c_cryptolocker
Size

36KB
MD5

dcc8b96a29a04f5365715b51f8c0f46c
SHA1

11b61ba9c400bd95d87ab23950bb70f77bd78981
SHA256

4210aa4c394a88e901da3a6fe866733e1d68b09f5ca0f0f71fc388a96234f520
SHA512

7f38eae7833a4854a7d820255053cc1094684c74088e793936b06acc59654d4b0479edf0838e80a1765bf67e5f17fafd81dade1fec66ac300c34d5184620abb7
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DYTJl:X6QFElP6n+gJQMOtEvwDpjBmzDYll

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-29_dcc8b96a29a04f5365715b51f8c0f46c_cryptolocker

Files

2024-08-29_dcc8b96a29a04f5365715b51f8c0f46c_cryptolocker
.exe windows:5 windows x86 arch:x86

7ba3aa8366ce167c7a77ebd6e6fea8e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
UpdateWindow
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
ShowWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ