2024-09-29_6ce89edfbf285b8e489abcc30305c4ff_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-29_6ce89edfbf285b8e489abcc30305c4ff_cryptolocker
Size

42KB
MD5

6ce89edfbf285b8e489abcc30305c4ff
SHA1

d67fb959c6a399a2471fcfabcaeb87fdfe896517
SHA256

ff15c831af75a145fd26db463ccd6c0a06764e213cd92f8abd20b6558ba43115
SHA512

fc1d4cd3b2097dcb02044f143b5f35d2354690b57b5e3cf20b7b19efa04b8eaa29f49eac1d2f61d7cba496c06942e5081e419159e7a0b5ef2e92db03ca77d374
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedmNT:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-29_6ce89edfbf285b8e489abcc30305c4ff_cryptolocker

Files

2024-09-29_6ce89edfbf285b8e489abcc30305c4ff_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ