2024-09-12_b39a79fbb19c9d9cc405896c7f9a0558_cryptolocker | Triage

Sharing

General

Target

2024-09-12_b39a79fbb19c9d9cc405896c7f9a0558_cryptolocker
Size

43KB
MD5

b39a79fbb19c9d9cc405896c7f9a0558
SHA1

2c2f49f22edb9fdab3eacda6e5e4bdeda1a40f4f
SHA256

5e6e743a95719e148754c14fc078966b78b0729c47be5eef914066d62ce4041b
SHA512

df93c8c6f2b0d694d96f0b7ee0ac1a16c76527469064787bd6acf38be255269d5eaa3c4db966b4445dba7e86497a682b225ff0ce452fc5f4c52d86802f660214
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TJ:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-12_b39a79fbb19c9d9cc405896c7f9a0558_cryptolocker

Files

2024-09-12_b39a79fbb19c9d9cc405896c7f9a0558_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ