2024-09-01_fef25ede6969364a9fb73a193a4963ff_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-01_fef25ede6969364a9fb73a193a4963ff_cryptolocker
Size

48KB
MD5

fef25ede6969364a9fb73a193a4963ff
SHA1

02dc34044d5f7cbe2491564667de9f735053e9b1
SHA256

1144cc6bfe6676533b592427fe874252424c5b3d3eff873a8b553c559c30d508
SHA512

66d474f66d2a8bea77b7ae84537c279aaac606ccf0ba912958a594b5acd14fab8a6a23d061c6e8afbf427973dad2d87efadd23154d61c64a27475fd2ecef00a7
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3dXj:V6QFElP6n+gMQMOtEvwDpjyaHaXrj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-01_fef25ede6969364a9fb73a193a4963ff_cryptolocker

Files

2024-09-01_fef25ede6969364a9fb73a193a4963ff_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ