2024-09-07_a729501e49694e369e3c131b5b2265f8_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-07_a729501e49694e369e3c131b5b2265f8_cryptolocker
Size

45KB
MD5

a729501e49694e369e3c131b5b2265f8
SHA1

68b974c6ca3a9ddce34a124b45816cd8307b26d1
SHA256

652b75434b974cd3b8e6d9045abb3ff425b2c6c26c7185e5203e243a7d0ab14a
SHA512

80d7e684bb465f8e08ea2a8e22e17f1cb32e56c0e2c9af233a65c6366f01005ae4a46d27c58bbe4064e8bb7955a46b3e936046d4c2431bf7788fcf40634b4966
SSDEEP

768:btB9g/WItCSsAGjX7e9N0hunrknljKrCY:btB9g/xtCSKqf1rksrf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-07_a729501e49694e369e3c131b5b2265f8_cryptolocker

Files

2024-09-07_a729501e49694e369e3c131b5b2265f8_cryptolocker
.exe windows:5 windows x86 arch:x86

a2bfa209044e11b72a41f731968fdff2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ