2024-09-05_7468c16b1b639cc8963b9082b71c94c8_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-05_7468c16b1b639cc8963b9082b71c94c8_cryptolocker
Size

43KB
MD5

7468c16b1b639cc8963b9082b71c94c8
SHA1

17d4b08ceb7ee7010212c81ac2a27e4be8e63191
SHA256

cc03fea65d9916eea3a79a07f29b6143cb26a6874afd3bb76e81e4e04bf2d43b
SHA512

0383487d2abb5a388ac69d2082b57bcc18645b6a39062dcd56767a2a5ed30f6ea35620516fbe1f3aa4c665d474f6dae40e6cd61b5cbd3f367b642a29f564977a
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCyD/95U:X6QFElP6n+gJQMOtEvwDpjBsYK/fbDFm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-05_7468c16b1b639cc8963b9082b71c94c8_cryptolocker

Files

2024-09-05_7468c16b1b639cc8963b9082b71c94c8_cryptolocker
.exe windows:5 windows x86 arch:x86

7ba3aa8366ce167c7a77ebd6e6fea8e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
UpdateWindow
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
ShowWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ