2024-09-03_86b27a3ede768d2950fd77a14273e00f_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-03_86b27a3ede768d2950fd77a14273e00f_cryptolocker
Size

44KB
MD5

86b27a3ede768d2950fd77a14273e00f
SHA1

b9087486eb4692b1496fb38af0af12354cb2d4a3
SHA256

b0b58ac05a18bc5f55339608beaaf661dfa2de8c5e14307ad3ca69a386fbaaca
SHA512

cf36e085d6c408f01dd6fef6a4d3c6e832c5ec18198f65fc1db3fb3f8836d49596f4e652e5dfd5f9213722d3aebacaf3580f55c025127bc422032d683e21b223
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwIxZWQpyH:btB9g/WItCSsAGjX7e9N0hunrknljKrn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-03_86b27a3ede768d2950fd77a14273e00f_cryptolocker

Files

2024-09-03_86b27a3ede768d2950fd77a14273e00f_cryptolocker
.exe windows:5 windows x86 arch:x86

a2bfa209044e11b72a41f731968fdff2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ