2024-09-28_b0886f8cf737af756f2e52927fa8b5d8_cryptolocker | Triage

Sharing

General

Target

2024-09-28_b0886f8cf737af756f2e52927fa8b5d8_cryptolocker
Size

54KB
MD5

b0886f8cf737af756f2e52927fa8b5d8
SHA1

445c27c88899a2f072774d4d99cd06af83989b61
SHA256

d63b20c921249ebeff6505779f6807532db0c2ef017a8a0ae84be1552dd20c44
SHA512

05dcf06d81951847cc0dd57634f28d140f0be87de98fd56da751f108abb295ccc2a79d91a55819ca1f1fcd90cb2cc956be185d93c724cbf937b59e27f1b8bb31
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjyaLccCGXlDS:V6a+pOtEvwDpjvDQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-28_b0886f8cf737af756f2e52927fa8b5d8_cryptolocker

Files

2024-09-28_b0886f8cf737af756f2e52927fa8b5d8_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ