2024-10-01_cf2e4ed82cf3f495564c9bab0df79f15_cryptolocker | Triage

Sharing

General

Target

2024-10-01_cf2e4ed82cf3f495564c9bab0df79f15_cryptolocker
Size

48KB
MD5

cf2e4ed82cf3f495564c9bab0df79f15
SHA1

2a2de38048fd474d3a4876bb424855240c84ed63
SHA256

f6ce026c6a8b4a5a017c4d8094aaaf5d848b115a8fb6eae646b59eef4548b928
SHA512

411bbf1acc67c6e5784c8a4d91a24bbc274d5c7edc60e4daa495d7c54ad5e0a6a565ae21ca74063f687b9cc54b3fdd7239af676f2b79bff9ebda276722d8d402
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3dX+r:V6QFElP6n+gMQMOtEvwDpjyaHaXr+r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-01_cf2e4ed82cf3f495564c9bab0df79f15_cryptolocker

Files

2024-10-01_cf2e4ed82cf3f495564c9bab0df79f15_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ