2024-09-08_4b2944f4084e6d2a56b3d47e8d962217_cryptolocker | Triage

Sharing

General

Target

2024-09-08_4b2944f4084e6d2a56b3d47e8d962217_cryptolocker
Size

43KB
MD5

4b2944f4084e6d2a56b3d47e8d962217
SHA1

cf6f3d8b746c3fe523248ab32ee8bb3a4bdffc5d
SHA256

4e5e2755c1f58683f44acde38c37990a3d3236900fac0238597586838f23fc6a
SHA512

4b817ccaacb9675d3d014e6e150b4071cfa3e2dad74772fb3970dfebd24b43bf3e4ba8a9ba4b3d3afe3491c8ef926594599a7e108cc3c25a3cf59af46ea46609
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1Tx:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-08_4b2944f4084e6d2a56b3d47e8d962217_cryptolocker

Files

2024-09-08_4b2944f4084e6d2a56b3d47e8d962217_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ