2024-09-07_e62586a208edafc9c1408b341806adf8_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-07_e62586a208edafc9c1408b341806adf8_cryptolocker
Size

49KB
MD5

e62586a208edafc9c1408b341806adf8
SHA1

73d723ab284ea657ebc7539b77f5838a4b8d65af
SHA256

d03fc202d687fdf6be0224611520270d317b7cac8c7641e98ac82ca0eb1d2fc7
SHA512

c25c36a692e1bb44753737a393fe68716c2d3a38ed9f37c48ece88f6671f074e023e6cc1dd0413c8d5f5bb0880046dc50519c4fcf5a1ec0b94f9605c8b12b637
SSDEEP

768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITV:26Q0ElP6G+gBQMOtEvwDpjgWMl7TV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-07_e62586a208edafc9c1408b341806adf8_cryptolocker

Files

2024-09-07_e62586a208edafc9c1408b341806adf8_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE