2024-09-19_8a66ee025c342901133f7689b6c4f216_cryptolocker | Triage

Sharing

General

Target

2024-09-19_8a66ee025c342901133f7689b6c4f216_cryptolocker
Size

35KB
MD5

8a66ee025c342901133f7689b6c4f216
SHA1

20192bd31f69cbaf1b1d2a02d803af6eeef64e5a
SHA256

143bafc111620f325f1cad521b4f1a1eb92567a353e169d8a1c9394d9f1a3649
SHA512

7a132b192a0545934efd849bdbf94b191927906edebc45b4ecbc57526a40aab53e6eb4bd05c7d33340099de4ed4d26fab61bf8ee7a3e29caa5211162de85cefc
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA02AxF9:btB9g/WItCSsAGjX7e9NZAxf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-19_8a66ee025c342901133f7689b6c4f216_cryptolocker

Files

2024-09-19_8a66ee025c342901133f7689b6c4f216_cryptolocker
.exe windows:5 windows x86 arch:x86

a2bfa209044e11b72a41f731968fdff2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ