2024-09-19_44dd224d3410bfb039e202a9e3de41a3_cryptolocker | Triage

Sharing

General

Target

2024-09-19_44dd224d3410bfb039e202a9e3de41a3_cryptolocker
Size

86KB
MD5

44dd224d3410bfb039e202a9e3de41a3
SHA1

f359556c0baf9acf8cb8247239767504b95b9522
SHA256

665c09c82db6ba2c61e91fb3dac2d4d17ecd09141b9b80daa758a766a185c253
SHA512

e3564e737b918d762ec84a59e16080f84a24b364280eead60566801a0462b30c1d3bf5fe519540f457921b90bc5e57496ebe8a44669c6fa541f4f46b62a53500
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjQGYQbNcqamvWL:V6a+pOtEvwDpjta

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-19_44dd224d3410bfb039e202a9e3de41a3_cryptolocker

Files

2024-09-19_44dd224d3410bfb039e202a9e3de41a3_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ