2024-09-03_095cdaaf396b08f2233b620c1dbd3430_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-03_095cdaaf396b08f2233b620c1dbd3430_cryptolocker
Size

32KB
MD5

095cdaaf396b08f2233b620c1dbd3430
SHA1

bc4ce1c6a8fc46b11d4c3d40912c092236424ed4
SHA256

b85be6658bb0e7d8f9ddfcc42d95b7b6efc500cf0cb4244b3a7aaf6cafed0132
SHA512

b70bebe56a73311f170c070cb488e8d952359224a060e452373e5e6b313bebaccd63fb25580f015617da0678d9b69e0362f6e43983ff99b2affb2ac3b69565d3
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNfoXbj:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-03_095cdaaf396b08f2233b620c1dbd3430_cryptolocker

Files

2024-09-03_095cdaaf396b08f2233b620c1dbd3430_cryptolocker
.exe windows:5 windows x86 arch:x86

db206e36db5c9492ce02c61a679129e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
DestroyWindow
LoadCursorA
GetClientRect
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
DeleteFileA
CloseHandle
CreateFileA

gdi32

DeleteObject
CreateFontIndirectA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ