2024-09-30_6101bc2cb65a70849c2c4c186fb95661_cryptolocker | Triage

Sharing

General

Target

2024-09-30_6101bc2cb65a70849c2c4c186fb95661_cryptolocker
Size

35KB
MD5

6101bc2cb65a70849c2c4c186fb95661
SHA1

bfcf1df11e2f1346c4c8210af6e00df23e1764a2
SHA256

a6e74bb2fd10e32582e36b1b2f469dfca8e736ed1e7a8b36daa8935d93dfa23c
SHA512

8c4e9e55a766c7b9998fdb081e71ed481d5a610517c8e1aad40d2bd713a36d8b3c464de6d188d29b03044bc497c521327089c8c8b732d64c846fe53be669140b
SSDEEP

384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qE4kb6oTeB:b7o/2n1TCraU6GD1a4Xt9bRU6zA6oTu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-30_6101bc2cb65a70849c2c4c186fb95661_cryptolocker

Files

2024-09-30_6101bc2cb65a70849c2c4c186fb95661_cryptolocker
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ