2024-09-01_3a9965e9a25e3ef117d2cbde1cbd1747_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-01_3a9965e9a25e3ef117d2cbde1cbd1747_cryptolocker
Size

72KB
MD5

3a9965e9a25e3ef117d2cbde1cbd1747
SHA1

2fdd40f07c23d1c685457f660ea5426ea92ccb67
SHA256

7d4ca1ccde6c71fa3a8d3b7e767fb8af10f9452d26856d17d31baf4bb7339b7d
SHA512

b725490c152d8e8457f395ab6185acfb788a11a6587204b70bf8599e09f8ea91c86aeef415de75d2e0ff18d5a86a7271ab336e52c54cfa76f3ff560655f688ca
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/Rf:vj+jsMQMOtEvwDpj5HZYTjipvF24X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-01_3a9965e9a25e3ef117d2cbde1cbd1747_cryptolocker

Files

2024-09-01_3a9965e9a25e3ef117d2cbde1cbd1747_cryptolocker
.exe windows:5 windows x86 arch:x86

5c55d83b58dbc1f7154223c32a893074

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
UpdateWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetCPInfo
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ