2024-09-06_663598785479ff5963dd70692ea4e958_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-06_663598785479ff5963dd70692ea4e958_cryptolocker
Size

43KB
MD5

663598785479ff5963dd70692ea4e958
SHA1

28c5ffbb02fdf59624757c511d21a63a97a3e53d
SHA256

c126d5343ffe2e8abd53b35c87e7b6afa700305db4cda2fbe64ea5fdba8c4e21
SHA512

402cd755e80003123103d05fab44a3a3d1d525ed8c5b1b93f3ba5c7b90724f2465d9c52d4ca411b6a7585d2d0e1a2a989fc4ec5f54d870b31534e896fe299a37
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1T3:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkL3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-06_663598785479ff5963dd70692ea4e958_cryptolocker

Files

2024-09-06_663598785479ff5963dd70692ea4e958_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ