2024-09-29_8e722a21ecf9b8af57e1ba664755648d_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-29_8e722a21ecf9b8af57e1ba664755648d_cryptolocker
Size

43KB
MD5

8e722a21ecf9b8af57e1ba664755648d
SHA1

8faf75004f8bd1f1dd15e6b9e1b03362a025d037
SHA256

12819b678d14e595e4486a2419c7e73ae4d2a26d4ca2533c2087b883fa6a5a4e
SHA512

3b0b81592fb56b030264f812a6e5367e1f877f1c8b57d6c4efde3e3506936a0fac445aeb54ebcabfdbf3982b11227564dee92abeef17cd033b3c0fd8d71477f0
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedm+MhE:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-29_8e722a21ecf9b8af57e1ba664755648d_cryptolocker

Files

2024-09-29_8e722a21ecf9b8af57e1ba664755648d_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ