2024-09-07_a692609b4ea552617b0bd00024bda8a5_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-07_a692609b4ea552617b0bd00024bda8a5_cryptolocker
Size

47KB
MD5

a692609b4ea552617b0bd00024bda8a5
SHA1

d642a8d64ad74175c69c50d9864abb00e9e3acf1
SHA256

ee788850611ed705519087164f51844d9beaf354d07d127b473bcfa96d430783
SHA512

fa7a2c7f5f3ede793ab385dfd42d9242a2694f0fb9e31ec0fd8f46c34dd90557b297de4e31e2973c96d799fa505f986cdd86ae928a168266a6bcb331b4a7dfac
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsJw:V6QFElP6n+gMQMOtEvwDpjyaYaFAh3V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-07_a692609b4ea552617b0bd00024bda8a5_cryptolocker

Files

2024-09-07_a692609b4ea552617b0bd00024bda8a5_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ