2024-09-27_a782cf32de636d204b45b51513a2b544_cryptolocker

Sharing

Copy URL Twitter E-mail

General

Target
2024-09-27_a782cf32de636d204b45b51513a2b544_cryptolocker
Size 59KB
Sample240927-h9k5tsvanf
SHA256 5d627db35e38fb9c04ee882b2ceb09fc8de3284caddb3666bbf0c68bae8ea24c
MD5 a782cf32de636d204b45b51513a2b544
SHA1 056f522fc04f7c7144d299a06ccde0423cec2a60
SHA512 3b281f21c1e628055015bd5c0e5d47dcee5c2b1f295f5aba6ab0ccaa01cb22753fffc1b8fabe936fa99c0ae8892065dee4e2c56e29f366874cb286a55d0e8885
SSDEEP 768:B9inqyNR/QtOOtEvwDpjBK/iVTab3GRuv3VylcbL7uxEUSi:B9mqyNhQMOtEvwDpjBPY7xv3gy7ux1Si
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-27_a782cf32de636d204b45b51513a2b544_cryptolocker

File Explorer

2024-09-27_a782cf32de636d204b45b51513a2b544_cryptolocker

.exe 59KB

2024-09-27_a782cf32de636d204b45b51513a2b544_cryptolocker

IMPHASH 7ba3aa8366ce167c7a77ebd6e6fea8e5
SHA256 5d627db35e38fb9c04ee882b2ceb09fc8de3284caddb3666bbf0c68bae8ea24c
MD5 a782cf32de636d204b45b51513a2b544
SHA1 056f522fc04f7c7144d299a06ccde0423cec2a60
SHA512 3b281f21c1e628055015bd5c0e5d47dcee5c2b1f295f5aba6ab0ccaa01cb22753fffc1b8fabe936fa99c0ae8892065dee4e2c56e29f366874cb286a55d0e8885
SSDEEP 768:B9inqyNR/QtOOtEvwDpjBK/iVTab3GRuv3VylcbL7uxEUSi:B9mqyNhQMOtEvwDpjBPY7xv3gy7ux1Si
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

49664

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

536B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rlwEs

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.wdbm

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.epwjdwx

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.RisVgtS

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.zKnY

Size

1024B

Virtual Size

753B

Characteristics

IMAGE_SCN_MEM_READ

2024-09-27_a782cf32de636d204b45b51513a2b544_cryptolocker

user32

kernel32

gdi32

generic