2024-09-14_2b71af80f392d17a7e159db788e15ee3_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-14_2b71af80f392d17a7e159db788e15ee3_cryptolocker
Size

63KB
MD5

2b71af80f392d17a7e159db788e15ee3
SHA1

b6ba7dc18ea3d0a38530aa01835f763116e5ca2b
SHA256

01d414901d0bfd6527b354608166fdf9bd4357a6a26018ca6355c0b4136d7c52
SHA512

55260ff3125fc199041cf3a0e0dd6d82004bf79456e934d672abe984c29c49c0fb3e100880a3a69fb5063ed1e1a332b993d8e8fc91cb85cadb0d0e0c9abfd3f6
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjyaLccVCbt5A/3ge:V6a+pOtEvwDpjvl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-14_2b71af80f392d17a7e159db788e15ee3_cryptolocker

Files

2024-09-14_2b71af80f392d17a7e159db788e15ee3_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ