2024-09-06_c7be876fb487f757937a16c6bf2db3c2_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-06_c7be876fb487f757937a16c6bf2db3c2_cryptolocker
Size

97KB
MD5

c7be876fb487f757937a16c6bf2db3c2
SHA1

c5f710525656da2bd29925c405cc3a2c5d615f4b
SHA256

270ca326b50d7c59edde91ad34acf15977416f2e9c90392760e6dceeca2f2451
SHA512

6686b228a42ce485a01172f2deb07894247b44febe2a4e7d1ee91007c35a7f27c909e956dd204b25274fe2ec45a9e55e7765ea5a4c6153f6351d5ab0d1957095
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp0o:V6a+pOtEvwDpjtzQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-06_c7be876fb487f757937a16c6bf2db3c2_cryptolocker

Files

2024-09-06_c7be876fb487f757937a16c6bf2db3c2_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ