2024-09-21_5e59692d25d12225489e5b1e73fafef2_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-21_5e59692d25d12225489e5b1e73fafef2_cryptolocker
Size

47KB
MD5

5e59692d25d12225489e5b1e73fafef2
SHA1

7ce3d1b2581cbd1ce016023a2070b76898e338ad
SHA256

252bea4f665806068eeef6a8e9ca70093bb82ab0753484636eca1214be62fef1
SHA512

a743ffd66198ca30f67ff7d66f03ec087f289cce40659f22a9915b66a47ec1fd5d490bdfc3f74585e4a8f7177f5738a805ab19344272570c376c8984d2555bc3
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3dXx:V6QFElP6n+gMQMOtEvwDpjyaHaXrx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-21_5e59692d25d12225489e5b1e73fafef2_cryptolocker

Files

2024-09-21_5e59692d25d12225489e5b1e73fafef2_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ