2024-09-11_a10cc0c411d45b898db250e95ff25cc4_ctb-locker

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-11_a10cc0c411d45b898db250e95ff25cc4_ctb-locker
Size

29KB
MD5

a10cc0c411d45b898db250e95ff25cc4
SHA1

363a55cacd1790906a297f4172dd97d447626d54
SHA256

ad7bbb79e961b39a415ad2409570de4426670dbc6c0ab5cfdae99e39552c7fdc
SHA512

63bc255b817d8ae6372ab506b65f7e6e3099af0a9675f14d8f6a13f5641738abaa3135db9e5dea3569978b51039a3337216b0f49f2252e4bbaefc890273244ba
SSDEEP

384:CvVbGfXrY45es0Ql72neq1wNbam9KZMI6xELvQpRGOzCT1Vw:mVbKXrpestwC8mlELvQpa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-11_a10cc0c411d45b898db250e95ff25cc4_ctb-locker

Files

2024-09-11_a10cc0c411d45b898db250e95ff25cc4_ctb-locker
.exe windows:5 windows x86 arch:x86

39dbc9bb8e435aa4a792b6f8d9ba63b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleA
CreateDirectoryA
GetPrivateProfileStructW
WaitForSingleObject
WriteConsoleA
GetConsoleTitleA
UpdateResourceA
GetTimeFormatA
LoadLibraryA
DeviceIoControl
GetNumberFormatW
GetCurrentDirectoryA
CloseHandle
SetFilePointer
GetTickCount
GetBinaryTypeA
SetCurrentDirectoryW
lstrcpynA
CompareStringA
GetProcAddress
CreateNamedPipeA
GetProcessHeap
GetDateFormatA
GetSystemTimeAsFileTime
GetComputerNameA
SetEnvironmentVariableW
GetCurrentProcess
GetPrivateProfileIntA
HeapValidate
GetConsoleAliasW
GetProcessId

nddeapi

NDdeShareEnumA
NDdeShareGetInfoA
NDdeShareDelA
NDdeShareSetInfoA
NDdeShareAddA

shlwapi

UrlIsOpaqueA
UrlIsNoHistoryW
UrlGetPartA
UrlIsA
PathCompactPathA
UrlGetLocationA
UrlCreateFromPathA
UrlHashA
PathCommonPrefixA
UrlCompareA
UrlEscapeA
UrlUnescapeA
PathCombineA

wtsapi32

WTSEnumerateServersA
WTSUnRegisterSessionNotification
WTSFreeMemory
WTSVirtualChannelRead
WTSWaitSystemEvent
WTSVirtualChannelOpen
WTSRegisterSessionNotification
WTSSetUserConfigW
WTSEnumerateProcessesA
WTSEnumerateSessionsW
WTSSendMessageA
WTSVirtualChannelWrite
WTSVirtualChannelPurgeInput
WTSQueryUserToken
WTSQuerySessionInformationA
WTSSetSessionInformationW
WTSVirtualChannelQuery

msimg32

DllInitialize
AlphaBlend
GradientFill
TransparentBlt
vSetDdrawflag

user32

wsprintfA
GetWindowTextA
DrawIcon
DialogBoxParamA
IsZoomed
SetCursorPos
GetMessageA
PeekMessageA
CreateWindowExA
GetPropA
GetWindowLongA
PostMessageA
IsWindow
GetCaretPos
IsCharLowerW
DispatchMessageA
CharToOemA

modemui

CountryRunOnce
InvokeControlPanel

certcli

CACloseCA
CACloseCertType
CAEnumFirstCA
CAEnumNextCA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39dbc9bb8e435aa4a792b6f8d9ba63b9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

nddeapi

shlwapi

wtsapi32

msimg32

user32

modemui

certcli

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 626B

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 626B

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 2KB - Virtual size: 2KB