2024-09-07_107d4dfe017424673330209a3afcf9e9_cryptolocker | Triage

Sharing

General

Target

2024-09-07_107d4dfe017424673330209a3afcf9e9_cryptolocker
Size

54KB
MD5

107d4dfe017424673330209a3afcf9e9
SHA1

22634347c0dcbb6942e34ff52b87d944e48d5da8
SHA256

86037328c36f48b9967b7bfe6ad57cde4960d37e7e521760c911fc77a76c8ccc
SHA512

cd663c8064799d1733f4bde79bd639ec0be7b01e4165f176a9bff6560367f6d42497d1cbe9d3074f4470b5b6be1715c574a1944c9b8ac48d6b676c71823e9a90
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTIw:X6QFElP6n+gJBMOtEvwDpjBtExml7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-07_107d4dfe017424673330209a3afcf9e9_cryptolocker

Files

2024-09-07_107d4dfe017424673330209a3afcf9e9_cryptolocker
.exe windows:5 windows x86 arch:x86

7ba3aa8366ce167c7a77ebd6e6fea8e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
UpdateWindow
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
ShowWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ