2024-09-25_eed1f25bc0fdb1548200071fd2e4e5bf_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-25_eed1f25bc0fdb1548200071fd2e4e5bf_cryptolocker
Size

48KB
MD5

eed1f25bc0fdb1548200071fd2e4e5bf
SHA1

a7296c8271047966b414bec16b20a2f5ad26e49d
SHA256

bf2233912c7b31ec35f30840edc05bae0f309c8f7bbb120e5f7b0110694b5a14
SHA512

67bfdda20566359742de58d246189917957c13a4d1af2e5cfe5dc21ad5c8a8558dbb7a16e4c7e757815526e402f47c46151f721cf7a06e2166f604d985f2a7aa
SSDEEP

768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITk:26Q0ElP6G+gBQMOtEvwDpjgWMl7Tk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-25_eed1f25bc0fdb1548200071fd2e4e5bf_cryptolocker

Files

2024-09-25_eed1f25bc0fdb1548200071fd2e4e5bf_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE