2024-09-06_563510e42ac9d537f170ce653ce204ff_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-06_563510e42ac9d537f170ce653ce204ff_cryptolocker
Size

49KB
MD5

563510e42ac9d537f170ce653ce204ff
SHA1

a9a6836e5f91d0f0c024ca677d84681c629139e7
SHA256

ab5dbb7755e5254043bf722426139e2de3defc04c4bd01387fe9b38ecf69528d
SHA512

c6e35d0add96b22a313f920975b2e7b1887e839c8eb0eb0e33adec3c3e870db06849e906fa37c91772632e32f97ac5b68a55083141fd69a70d621947cdd58b62
SSDEEP

768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITT:26Q0ElP6G+gBQMOtEvwDpjgWMl7TT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-06_563510e42ac9d537f170ce653ce204ff_cryptolocker

Files

2024-09-06_563510e42ac9d537f170ce653ce204ff_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE